312-50V13 Question #190: Real Exam Question with Answer & Explanation

Question

Why containers are less secure that virtual machines?

Options

• AHost OS on containers has a larger surface attack.
• BContainers may full fill disk space of the host.
• CA compromise container may cause a CPU starvation of the host.
• DContainers are attached to the same virtual network.

Explanation

This question explores the fundamental reason why containers are generally considered less secure than virtual machines.

Common mistakes.

• B. While containers can consume excessive disk space leading to denial of service, this is a resource management issue rather than a fundamental security vulnerability related to the isolation model itself, which is the primary concern when comparing container and VM security.
• C. A compromised container causing CPU starvation is a resource exhaustion issue, which can lead to denial of service, but it's not the primary architectural reason why containers offer weaker isolation and are considered less secure than virtual machines.
• D. Containers being attached to the same virtual network is a network configuration choice; virtual machines can also be configured with shared virtual networks, so this is not a unique or fundamental reason for containers being less secure than VMs.

Concept tested. Container vs. VM security isolation

Reference. https://learn.microsoft.com/en-us/azure/container-instances/container-instances-faq#what-is-the-difference-between-a-container-and-a-vm

No community discussion yet for this question.