PCCSE · Question #204
Which two statements apply to the Defender type Container Defender - Linux?
The correct answer is A. It is implemented as runtime protection in the userspace. C. It is deployed as a container.. Container Defender - Linux runs as a privileged Docker container on the Linux host (answer C). Because it runs in userspace rather than as a kernel module or eBPF program inside the kernel, it implements its runtime protection entirely in userspace (answer A). It is not deployed
Question
Which two statements apply to the Defender type Container Defender - Linux?
Options
- AIt is implemented as runtime protection in the userspace.
- BIt is deployed as a service.
- CIt is deployed as a container.
- DIt is incapable of filesystem runtime defense.
How the community answered
(41 responses)- A90% (37)
- B7% (3)
- D2% (1)
Explanation
Container Defender - Linux runs as a privileged Docker container on the Linux host (answer C). Because it runs in userspace rather than as a kernel module or eBPF program inside the kernel, it implements its runtime protection entirely in userspace (answer A). It is not deployed as a host service (eliminating B), and it is fully capable of filesystem runtime defense-monitoring file integrity and detecting unexpected writes-so answer D is false.
Topics
Community Discussion
No community discussion yet for this question.