Study. uk . com
  1. Home
  2. All questions
  3. Question 382

CompTIA Security+ study material · question 382 of 611

Why is isolation between containers weaker than between virtual machines?

  1. Containers cannot be scanned for vulnerabilities
  2. Containers cannot use network segmentation
  3. Containers share the host kernel, so a kernel flaw affects every container on the host
  4. Containers run with root privileges by design
Show the answer

Answer: C. Containers share the host kernel, so a kernel flaw affects every container on the host

A hypervisor gives each guest its own kernel; containers share one, so the shared kernel is the boundary.

Challenge yourself on this topic → Study as cards