Container
OS-level virtualization that packages an app and its dependencies into a portable, isolated unit.
Containers share the host kernel, so they start fast and pack densely — but a kernel exploit can affect every container on the host, weaker isolation than a hypervisor’s. Harden the supply chain with image scanning, signed images, minimal base images, and admission controllers that reject noncompliant workloads.
PlayPrepHQ study notes are written and reviewed against primary exam sources. How we create & review content →