Exam CAS-004 topic 1 question 457 discussion

o Containers share the host kernel: This aligns perfectly with the requirement of each environment having its own OS but sharing the kernel version and properties of the host. o Isolation between services: Containers provide strong isolation between services, ensuring that each service runs in its own environment with no interference from other services. o Lightweight and efficient: Compared to full virtual machines, containers are lightweight and consume fewer resources, making them ideal for running multiple services on a single host. o Type 1 hypervisor (bare-metal): While it allows for full OS isolation, it would not be as efficient as containers when the goal is to share the host kernel.

Container do not run OS but the application need just dependences. Hypervisor Type 1 can run OS for each VM.

Container, but re-shaping something the "requisites"

Containers are a lightweight virtualization technology that allows multiple isolated environments to run on a single host operating system. Each container runs its own instance of an application along with its dependencies but shares the host OS kernel. Containers provide isolation at the process level, meaning each container can run independently, without affecting others, and with its own filesystem, network, and other resources. Containers share the same kernel version and properties of the host, which aligns with the requirement to share the kernel version and properties of the running host.

share kernel and properties of the host

Containers are the most suitable technology for the scenario described by the security administrator. They allow each service to run in its own isolated environment with its own filesystem and processes while sharing the host's kernel. This meets the requirement of having separate OS environments for each service but leveraging the common properties and kernel version of the host system, ensuring efficient resource utilization and isolation between services.

Type 1 hypervisor, also known as a bare-metal hypervisor, installs directly on the hardware and creates virtual machines (VMs) that have their own isolated environments with separate virtualized hardware resources. Each VM can run its own operating system, meeting the administrator's needs for isolation and shared kernel properties. Containers share the kernel of the host system, but they don't provide complete isolation like virtual machines. Processes in different containers can potentially interact with each other.