305-300 無料問題集「Lpi LPIC-3 Exam 305: Virtualization and Containerization」

（A）Restrict the disk space a container can consume.

（B）Map potentially dangerous system calls to an emulation layer provided by the container virtualization.

（C）Allow regular users to start containers with elevated permissions.

（D）Prevent processes from performing actions which might infringe the container.

（E）Enable memory deduplication to cache files which exist in multiple containers.

（A）Shell scripts to execute

（B）Lists of URLs to import

（C）ISO images to boot from

（D）cloud-config declarations in YAML

（E）Base64-encoded binary files to execute

（A）/dev/urandom

（B）/dev/console

（C）/dev/kmem

（D）/dev/root

（E）/dev/log

（A）CPU emulation

（B）Application containers

（C）Paravirtualization

（D）Hardware containers

（E）System containers

（A）VIRT

（B）VMX

（C）HVM

（D）PVM

（E）SVM

（A）Kernel Namespaces

（B）File System Permissions

（C）Linux Capabilities

（D）Control Groups

（E）POSIXACLs