exam questions

Exam CAS-004 All Questions

View all questions & answers for the CAS-004 exam

Exam CAS-004 topic 1 question 67 discussion

Actual exam question from CompTIA's CAS-004
Question #: 67
Topic #: 1
[All CAS-004 Questions]

A security analyst is researching containerization concepts for an organization. The analyst is concerned about potential resource exhaustion scenarios on the
Docker host due to a single application that is overconsuming available resources.
Which of the following core Linux concepts BEST reflects the ability to limit resource allocation to containers?

  • A. Union filesystem overlay
  • B. Cgroups
  • C. Linux namespaces
  • D. Device mapper
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
AlexJacobson
Highly Voted 2 years, 11 months ago
Selected Answer: B
I think it's B - CGroups "Namespaces provide isolation of system resources, and cgroups allow for fine‑grained control and enforcement of limits for those resources."
upvoted 13 times
...
Mr_BuCk3th34D
Highly Voted 2 years, 5 months ago
Selected Answer: B
Cgroups, or control groups, is a Linux kernel feature that allows the administrator to allocate resources such as CPU, memory, and I/O bandwidth to processes or groups of processes in a system. Cgroups can be used to limit resource allocation to containers, ensuring that a single application does not overconsume available resources and cause resource exhaustion on the Docker host.
upvoted 12 times
...
23169fd
Most Recent 11 months, 2 weeks ago
Selected Answer: B
Cgroups (Control Groups): Cgroups is a Linux kernel feature that allows the system administrator to allocate and limit the resources (CPU, memory, disk I/O, network bandwidth, etc.) that processes or groups of processes can use. It is specifically designed to manage and limit resource usage in a way that ensures that no single application can exhaust the available resources on a Docker host, thus providing a way to control resource allocation to containers.
upvoted 2 times
...
talosDevbot
1 year, 5 months ago
Selected Answer: B
From ChatGPT, after asking the difference between Cgroups and namespaces: Cgroups are used to set resource limits and manage resource allocation, while namespaces provide process isolation, network isolation, and other forms of isolation
upvoted 1 times
...
OdinAtlasSteel
1 year, 7 months ago
Selected Answer: B
B. Cgroups is the correct answer. Cgroups is a Linux kernel feature that allows the isolation, prioritization, and accounting of resource usage (such as CPU, memory, disk I/O) for a collection of processes, which is crucial for managing resources in containerized environments like Docker.
upvoted 1 times
...
BiteSize
1 year, 11 months ago
Selected Answer: B
Source: Verifying each answer against Chat GPT, my experience, other test banks, a written book, and weighing in the discussion from all users to create a 100% accurate guide for myself before I take the exam. (It isn't easy because of the time needed, but it is doing my diligence)
upvoted 1 times
...
kyle942
1 year, 11 months ago
Selected Answer: B
https://www.howtogeek.com/devops/what-are-linux-namespaces-and-what-are-they-used-for/#:~:text=Cgroup%20is%20another,a%20specific%20cgroup. Cgroups is for groups, namespace is f
upvoted 1 times
...
sandman310323
2 years ago
Selected Answer: B
Quick Googles search. cgroups, short for control groups, allow administrators to limit and distribute resources among different groups of processes. Namespaces, on the other hand, create isolated environments for processes, separating them from the host system and other processes
upvoted 2 times
...
javier051977
2 years, 2 months ago
Selected Answer: B
Cgroups, or Control Groups, is a Linux kernel feature that allows for the allocation of resources, such as CPU, memory, and I/O, among a group of processes. Cgroups can be used to limit the amount of resources that a container is allowed to use, preventing a single application from overconsuming available resources on the Docker host.
upvoted 3 times
...
Geofab
2 years, 3 months ago
Selected Answer: B
I think its B as well https://medium.com/@BeNitinAgarwal/understanding-the-docker-internals-7ccb052ce9fe#:~:text=Cgroups,optionally%20enforce%20limits%20and%20constraints.
upvoted 2 times
...
AnnoyingIAGuy
2 years, 5 months ago
Selected Answer: B
I'm going with B
upvoted 3 times
...
hidady
2 years, 5 months ago
B is the correct answer " CGroups "
upvoted 3 times
...
Protocol0
2 years, 7 months ago
Selected Answer: B
https://www.nginx.com/blog/what-are-namespaces-cgroups-how-do-they-work/
upvoted 3 times
...
dangerelchulo
2 years, 8 months ago
Selected Answer: C
see my explanation below
upvoted 1 times
...
adamwella
2 years, 9 months ago
Selected Answer: C
Selected answer should be C
upvoted 2 times
...
dangerelchulo
2 years, 9 months ago
according to comptia containerization is the best method, they also show examples of docker in their book and also stated that is better to establish namespaces
upvoted 1 times
...
Jackie2022
2 years, 10 months ago
LinuxNamespaces are a feature of the Linux kernel that partitions kernel resources such that one set of processes sees one set of resources while another set
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...