Valid DCA Dumps shared by ExamDiscuss.com for Helping Passing DCA Exam! ExamDiscuss.com now offer the newest DCA exam dumps, the ExamDiscuss.com DCA exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com DCA dumps with Test Engine here:
Is this a Linux kernel namespace that is disabled by default and must be enabled at Docker engine runtime to be used? Solution: user
Correct Answer: A
Explanation The user namespace is a Linux kernel namespace that is disabled by default and must be enabled at Docker engine runtime to be used. The user namespace allows the host system to map its own uid and gid to some different uid and gid for containers' processes. This improves the security of Docker by isolating the user and group ID number spaces, so that a process's user and group ID can be different inside and outside of a user namespace1. To enable the user namespace, the daemon must start with --userns-remap flag with a parameter that specifies base uid/gid2. All containers are run with the same mapping range according to /etc/subuid and /etc/subgid3. References: * Isolate containers with a user namespace * Using User Namespaces on Docker * Docker 1.10 Security Features, Part 3: User Namespace