DCA · Question #71
A company's security policy specifies that development and production containers must run on separate nodes in a given Swarm cluster. Can this be used to schedule containers to meet the security…
The correct answer is B. No. Resource reservation allocates specific CPU and memory for containers on a node but does not control their placement on separate nodes based on distinct policy requirements.
Question
A company's security policy specifies that development and production containers must run on separate nodes in a given Swarm cluster. Can this be used to schedule containers to meet the security policy requirements? Solution: resource reservation
Options
- AYes
- BNo
How the community answered
(31 responses)- A29% (9)
- B71% (22)
Why each option
Resource reservation allocates specific CPU and memory for containers on a node but does not control their placement on separate nodes based on distinct policy requirements.
Resource reservation does not provide a facility for segregating workloads onto different classes of nodes within a Docker Swarm cluster.
Resource reservation ensures a container has a minimum amount of CPU or memory on the scheduled node, but it lacks mechanisms to restrict container placement to specific node types, such as separating development from production nodes. This feature addresses resource availability rather than node selection criteria for policy enforcement.
Concept tested: Docker Swarm container placement limitations
Source: https://docs.docker.com/engine/swarm/swarm-mode/configure-service-resources/
Topics
Community Discussion
No community discussion yet for this question.