Free practice · No sign-up required
15 questions with answer explanations. Choose an answer below to begin.
Which command starts a basic interactive shell inside a running container?
Working with containers
0/15 answered · Bookmark questions to review later. Focus the practice area to use keys 1–9 and Enter.
Learn by doing
Use official documentation and hands-on labs to work through topics you missed.
Prefer to read at your own pace? Work through each question below, then open its answer to check your reasoning. You can link directly to a question or print this reference.
Which command starts a basic interactive shell inside a running container?
podman exec -it /bin/sh
podman run -it /bin/sh
podman attach
podman start
Correct answer
podman exec -it /bin/sh
The podman exec command runs a new process in a running container, and -it provides an interactive terminal. This is the standard way to open a shell inside an existing container.
What is the primary purpose of a container image registry?
To store and distribute container images
To compile source code into binaries
To monitor container performance metrics
To manage user access to the host OS
Correct answer
To store and distribute container images
A container image registry serves as a repository where container images are stored and made available for deployment. Common examples include registries.redhat.io and local registries.
Which file is commonly used to define the build instructions for a container image?
Dockerfile
Makefile
compose.yaml
settings.json
Correct answer
Dockerfile
A Dockerfile contains a series of instructions that automate the creation of a container image. It specifies the base image, copies files, and defines runtime commands.
Which command pulls an image from a remote registry to the local system?
podman pull
podman fetch
podman get
podman download
Correct answer
podman pull
The podman pull command downloads a container image and its layers from a registry to the local storage, making it available for local use.
What is a common use case for container volumes?
To persist data generated by and used by containerized applications
To increase CPU speed for container processes
To replace the container's base image
To encrypt container network traffic
Correct answer
To persist data generated by and used by containerized applications
Volumes provide a way to persist data beyond the lifecycle of a container and to share data between containers. They map host directories into the container filesystem.
Which statement best describes a container image layer?
Each layer represents a set of filesystem changes and is typically immutable
Layers are executable binaries that run in sequence during boot
Layers are user accounts defined inside the container
Layers are network segments used for container communication
Correct answer
Each layer represents a set of filesystem changes and is typically immutable
Container images are built in layers, where each layer adds files or modifies the filesystem. These layers are stacked and are generally immutable, supporting image reuse and efficient distribution.
What is the default behavior of a container when the main process exits?
The container stops
The container restarts automatically
The container enters a paused state
The container logs the event and continues
Correct answer
The container stops
Containers are designed to run a single foreground process. When that process terminates, the container lifecycle ends and the container stops.
Which tool is commonly used to manage container images and build workflows programmatically?
Buildah
grep
tar
ssh
Correct answer
Buildah
Buildah is a command-line tool that facilitates building OCI container images and managing image workflows without requiring a daemon, aligning with Red Hat tooling.
What does a container port mapping do?
Links a container's network port to a port on the host system
Encrypts data between containers
Assigns a permanent hostname to the container
Increases the container's CPU quota
Correct answer
Links a container's network port to a port on the host system
Port mapping connects a service running inside a container to a port on the host, enabling external access to the containerized application.
Which command lists all running containers on a system?
podman ps
podman list
podman status
podman show
Correct answer
podman ps
The podman ps command displays information about currently running containers, including their IDs, names, and status.
What is a typical use of a container health check?
To verify that the application inside the container is responding as expected
To measure the physical temperature of the host server
To update the container image automatically
To change container user permissions at runtime
Correct answer
To verify that the application inside the container is responding as expected
Health checks allow the system to determine if a container is functioning correctly, often by probing an endpoint or command within the container.
Which of the following is a benefit of using immutable infrastructure patterns with containers?
Simplifies rollback by replacing containers rather than modifying them
Reduces the need for container images
Eliminates the use of container registries
Increases the size of container images significantly
Correct answer
Simplifies rollback by replacing containers rather than modifying them
Immutable infrastructure treats containers as disposable; to update a service, you deploy a new container instance instead of modifying the existing one, improving reliability and traceability.
What is the purpose of a container entrypoint?
To define the default command executed when the container starts
To store persistent configuration files
To manage network bandwidth allocation
To control container image compression
Correct answer
To store persistent configuration files
An entrypoint defines the executable that runs when a container starts, providing a default command that can be overridden at runtime.
Which practice helps ensure container images are built from verified sources?
Using signed images and image scanning
Disabling all container networking
Storing images only on local disks
Avoiding the use of container volumes
Correct answer
Using signed images and image scanning
Signed images and vulnerability scanning help verify the integrity and security of container images before deployment, which is critical in production environments.
Which command configures a container to restart automatically unless it is stopped explicitly?
docker run --restart always
docker update --restart=on-failure
docker container start --policy always
docker service update --restart-condition any
Correct answer
docker run --restart always
The --restart always flag ensures a container restarts automatically unless it is stopped manually.
Recall the answer before opening each card.
podman exec -it /bin/sh (or docker exec -it /bin/sh) starts a new process in a running container with an interactive terminal.
To store and distribute container images. Registries like registries.redhat.io host images for download and deployment.
A Dockerfile contains instructions such as FROM, COPY, and RUN to automate image creation.
podman pull (or docker pull) downloads an image and its layers from a registry to local storage.
To persist data generated by and used by containerized applications beyond the container's lifecycle.
Each layer represents a set of filesystem changes and is typically immutable; layers stack to form the final image.
The container stops because containers are designed to run a single foreground process; its exit ends the lifecycle.
Buildah facilitates building OCI images and managing image workflows without requiring a daemon.
It links a container's network port to a host port, enabling external access to containerized services.
podman ps (or docker ps) shows running containers with IDs, names, and status.
To verify that the application inside the container is responding as expected, often by probing an endpoint.
It simplifies rollback by replacing containers rather than modifying them, improving reliability and traceability.
It defines the executable that runs when a container starts, providing a default command that can be overridden.
Using signed images and image scanning helps verify integrity and security before deployment.
--restart always (e.g., docker run --restart always) ensures the container restarts unless manually stopped.
podman stop (or docker stop) sends a SIGTERM, then SIGKILL after a grace period.
Use podman rm (or docker rm). Add the -f flag to force remove a running container.
Volumes are managed by Podman and stored in a host directory under /var/lib/containers; bind mounts map any host path into the container.
It sets the base image for subsequent instructions, starting the image build from an existing image.
Use the EXPOSE instruction in a Dockerfile to document ports, but it does not publish them; -p is needed for publishing.
Read the prompt, commit to an answer, then flip the card. Move through the deck at your own pace and repeat any topic that does not come back quickly.
Card 1 of 20
1 reviewed this session
Connect the concepts
Open a branch to connect a topic with its practice questions and explanations. Use the map to choose your next review topic.
This is an analysis of the practice bank, not a claim about the vendor's live exam blueprint. Use it to identify the knowledge, judgment, and recall patterns exercised here, then verify your coverage against the current official exam guide.
This section covers the foundational concepts that underpin container technology. You should understand that containers are ephemeral by design—when the main process exits, the container stops. Immutable infrastructure patterns promote replacing containers rather than modifying them, simplifying rollbacks. A container image is built from layers, each representing a set of filesystem changes, typically immutable. The primary purpose of a container image registry is to store and distribute images, enabling reproducibility across environments. These principles are essential for the Red Hat Certified Specialist in Containers exam.
Proficiency with container commands is tested through practical scenarios. The practice bank emphasizes podman commands, which align with Red Hat’s container tooling. Use podman exec -it /bin/sh to start an interactive shell inside a running container. List all running containers with podman ps. To download an image from a remote registry, execute podman pull. For building images, Dockerfile remains the standard definition file. Buildah is a tool for programmatic image management without a daemon. These commands form the day-to-day workflow of a container specialist.
Understanding container lifecycle is critical for reliable deployments. An entrypoint defines the initial executable that runs when a container starts. Health checks verify the application inside is responding as expected, enabling automated recovery. Restart policies configure automatic restarts unless explicitly stopped; e.g., docker run --restart always ensures the container restarts on failure or reboot. The practice bank tests these features, reinforcing that containers are managed as ephemeral units that require careful lifecycle policies.
Containers require persistent storage and external connectivity. Container volumes persist data beyond container lifecycles and allow sharing between containers by mapping host directories into the container filesystem. Port mapping links a container’s internal port to a host port, enabling external access to containerized services. The practice bank covers these topics to ensure you can manage data persistence and network exposure. Production environments often rely on volumes for stateful applications and port mapping for service accessibility.
Study workflow
Run through each podman and docker command from the practice bank multiple times. Use podman exec -it <container> /bin/sh to open a shell, podman ps to list containers, and podman pull to download images. Ensure you understand the flags and output.
Build a simple Dockerfile with multiple RUN commands. Observe how each command creates a new layer. Then push the image to a local registry using podman push. This solidifies the concept of layers and registry interaction.
Run a container like podman run -d -v /host/data:/container/data -p 8080:80 nginx. Verify that data persists after container removal and that the web server is accessible on localhost:8080. This ties volumes and port mapping together.
Create a container with --restart always and a HEALTHCHECK instruction. Stop the container’s main process manually and observe automatic restart. Then deliberately crash the application to see the health check status change. This reinforces failover behavior.
Use Buildah to create a container from a base image, copy files, and commit a new image. Compare the workflow with a Dockerfile build. Buildah is a key Red Hat tool for scripted image creation without a daemon.
FAQ
Clear boundaries on what the bank covers, how to use it, and where official vendor information still matters.
podman run creates and starts a new container from an image. podman exec runs a new process in an already running container, often used to open a shell or debug an existing container.
Red Hat promotes Podman, Buildah, and Skopeo as daemonless alternatives to Docker. Podman commands are mostly compatible with Docker CLI but run without a central daemon, improving security and rootless operation.
Volumes decouple data from the image lifecycle. They persist when the container is removed, allow sharing data between containers, and are ideal for stateful applications like databases. Copying data into an image makes it part of the immutable image, which is not suitable for dynamic data.
For a service that must always be running, use --restart always (or its Podman equivalent). This ensures the container restarts automatically on failure, host reboot, or even after a manual stop unless explicitly removed.
Yes, Podman and Buildah support Dockerfiles. You can run podman build -t myimage . to build from a Dockerfile. Buildah also allows building from Dockerfiles using buildah bud.
Browse another free bank or use the study strategy guide to turn your misses into spaced review.
