Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Linux Foundation CKS Exam - Topic 1 Question 41 Discussion

ContextThis cluster uses containerd as CRI runtime.Containerd's default runtime handler is runc. Containerd has been prepared to support an additional runtime handler, runsc (gVisor).TaskCreate a RuntimeClass named sandboxed using the prepared runtime handler named runsc.Update all Pods in the namespace server to run on gVisor.
A) Explanation:

Linux Foundation CKS Exam - Topic 1 Question 41 Discussion

Actual exam question for Linux Foundation's CKS exam
Question #: 41
Topic #: 1
[All CKS Questions]

Context

This cluster uses containerd as CRI runtime.

Containerd's default runtime handler is runc. Containerd has been prepared to support an additional runtime handler, runsc (gVisor).

Task

Create a RuntimeClass named sandboxed using the prepared runtime handler named runsc.

Update all Pods in the namespace server to run on gVisor.

Show Suggested Answer Hide Answer
Suggested Answer: A

by Devora at Aug 30, 2023, 05:21 AM

Limited Time Offer

25%

Off

Get Premium CKS Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Ressie
10 months ago
runc has been solid, why change it up?
upvoted 0 times
...
Pearlie
10 months ago
Wait, are we really switching all Pods to gVisor? Sounds risky.
upvoted 0 times
...
Bok
10 months ago
Just created a RuntimeClass named sandboxed. Easy peasy!
upvoted 0 times
...
Pok
10 months ago
Not sure if it's worth the performance hit, though.
upvoted 0 times
...
Rueben
11 months ago
gVisor is great for added security!
upvoted 0 times
...
Alfreda
11 months ago
I vaguely remember something about annotations in the RuntimeClass definition. Do we need to include those for gVisor?
upvoted 0 times
...
Iesha
11 months ago
I feel a bit uncertain about updating all Pods in the namespace. Did we cover how to do that with a command or a YAML file?
upvoted 0 times
...
Yuriko
11 months ago
This seems similar to a practice question we did on setting up different runtime handlers. I hope I can recall the steps correctly.
upvoted 0 times
...
Jacqueline
11 months ago
I think I remember how to create a RuntimeClass, but I'm not entirely sure about the exact syntax for using runsc.
upvoted 0 times
...
Lilli
11 months ago
This seems pretty straightforward. I'll create the RuntimeClass, then update the Pods in the server namespace to use the new RuntimeClass. Shouldn't be too difficult as long as I follow the steps carefully.
upvoted 0 times
...
Jacqueline
11 months ago
I'm a little confused by the context here. Does the cluster already have the runsc runtime handler configured, or do I need to set that up first? I'll need to double-check the requirements before proceeding.
upvoted 0 times
...
Galen
11 months ago
Okay, I think I've got this. First, I'll create the RuntimeClass resource with the runsc runtime handler. Then I'll update the Pod spec for the Pods in the server namespace to use that RuntimeClass.
upvoted 0 times
...
Nadine
11 months ago
Hmm, I'm a bit unsure about the steps here. I'll need to review the containerd documentation on how to set up and configure the additional runtime handler.
upvoted 0 times
...
Vallie
12 months ago
This looks straightforward. I'll start by creating the RuntimeClass for the runsc runtime handler, then update the Pods in the server namespace to use that RuntimeClass.
upvoted 0 times
...
Kristofer
12 months ago
Okay, let's see. The label of the object could have been changed, so that's definitely a possibility. And if it's a custom object, Data Loader may not be the best tool to use.
upvoted 0 times
...
Lucille
12 months ago
I'm a bit confused on this one. I'm not sure if the deficits should be reported as organization costs or capitalized and amortized. I'll have to review my notes.
upvoted 0 times
...
Izetta
12 months ago
I think I saw a question like this in our study materials. My gut says it's true, because minimizing software does help with security.
upvoted 0 times
...

Save Cancel