Docker - Security
Which Docker run flag allows you to explicitly disable a capability for a container?
Which Docker run flag allows you to explicitly disable a capability for a container?
easy📝 Conceptual Q2 of 15
Step-by-Step Solution
Solution:
Step 1: Understand capability flags
The--cap-addflag adds capabilities, while--cap-dropremoves them.Step 2: Identify the flag to disable capabilities
To disable or remove a capability,--cap-dropis used.Final Answer:
--cap-drop -> Option CQuick Check:
Flag to remove capabilities is--cap-drop[OK]
Quick Trick: Use --cap-drop to remove capabilities from containers [OK]
Common Mistakes:
- Confusing --cap-add with --cap-drop
- Using --privileged to remove capabilities
- Thinking --security-opt disables capabilities
Master "Security" in Docker
Want More Practice?
15+ quiz questions · All difficulty levels · Free
Free Signup - Practice All QuestionsMore Docker Quizzes