Title: Quiz 1 — Why Containers for AI: VMs, Images, and the Docker Model
Course: AIINFRA 101: Applied Infrastructure & Containerization > Section: Week 01 — Why Containers for AI: VMs, Images, and the Docker Model

Q: What is the main reason containers start faster than virtual machines?
- Containers use faster CPUs
- Containers share the host OS kernel instead of booting their own guest OS
- Containers don't use a filesystem
- Containers are always smaller in file size
A: Containers share the host OS kernel instead of booting their own guest OS

Q: A Docker image includes a complete guest operating system, just like a VM image.
- True
- False
A: False

Q: Which two Linux kernel primitives are primarily responsible for container isolation and resource limits?
- Hypervisor and BIOS
- Namespaces and cgroups
- Registries and layers
- Kernels and containers
A: Namespaces and cgroups

Q: In one or two sentences, explain the difference between a Docker image and a running container.
Feedback: Sample/expected answer: An image is a read-only, immutable template (layered filesystem + app + dependencies); a container is a running or stopped instance created from that image, with its own writable layer on top.

Q: What does the Open Container Initiative (OCI) primarily provide?
- Free cloud hosting for containers
- A standardized container image and runtime format so tools like Docker, containerd, and CRI-O can interoperate
- A replacement for Linux namespaces
- A GPU driver specification
A: A standardized container image and runtime format so tools like Docker, containerd, and CRI-O can interoperate

Q: Because containers share the host kernel, a kernel-level vulnerability could potentially affect every container running on that host.
- True
- False
A: True

Q: Why are containers generally considered a security tradeoff compared to VMs?
- Containers have no filesystem isolation at all
- Containers are fully isolated, so there is no tradeoff
- Containers are faster and lighter because they share a kernel, but that shared kernel means an isolation breach can impact multiple containers, whereas VMs are more isolated but heavier
- VMs and containers have identical security models
A: Containers are faster and lighter because they share a kernel, but that shared kernel means an isolation breach can impact multiple containers, whereas VMs are more isolated but heavier

Q: Name one reason Docker's layered image format is efficient when pulling an updated image.
Feedback: Sample/expected answer: Only the changed layer(s) need to be downloaded/rebuilt; unchanged layers are cached and reused, so you don't have to re-download the entire image.