Docker and CI/CD · Senior · Question 9 of 75
When are standard containers not enough isolation?
- 1Running containers built from Alpine-based images
- ✓Correct answer: Running untrusted code; use gVisor, Kata or microVMs
- 3Running more than ten containers on a single host
Explanation
All containers share the host kernel, so one kernel exploit breaks isolation. Sandboxed runtimes or lightweight VMs add a much stronger boundary for multi-tenant code.