Discussion
Assertion (A): Containers provide weaker isolation than virtual machines.
Reason (R): They share the host kernel, so a kernel level escape affects every container on the host.
Answer: B
Correct answer: Both A and R are true, and R is the correct explanation of A
Both are true and the reason gives the mechanism. A virtual machine’s escape must get through the hypervisor, a small and narrow interface; a container’s escape need only get through the kernel’s system call surface, which is very large. A kernel vulnerability therefore exposes every container on the host at once, which is why untrusted multi-tenant workloads are given a virtual machine boundary or a sandboxed runtime.
No comment is present. Be the first to comment.
Loading…
Post your comment
Please log in or register to post a comment.
Examination Categories
- SSC Exams
- Banking Exams
- Teaching Exams
- Civil Services Exams
- Railways Exams
- Engineering Recruitment Exams
- Defence Exams
- State Government Exams
- Police Exams
- Insurance Exams
- Nursing Exams
- Other Government Exams
- NRA CET
- PG Entrance Exams
- Campus Placement
- MBA Entrance Exams
- CUET and UG Entrance
- Judiciary Exams
- Regulatory Body Exams
- Software Development