Question
You have a Windows Server 2022 container host named Host1 that has the Subsystem for Linux installed and the container images shown in the following table.
You need to deploy the images to Host1. The solution must maximize the isolation of the containers.
Which images can you run by using process isolation, and which images can you run by using Hyper-V isolation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
| Name | Base image operating system |
| --- | --- |
| image1 | Windows Server 2022 |
| image2 | Windows Server 2019 |
| image3 | Windows Server 2016 |
| image4 | Linux |
Explanation
Process isolation: image1 only. A process-isolated container shares the host's kernel, so its base image must match the host's Windows build. On a Windows Server 2022 host, only Windows Server 2022 images support process isolation; Windows Server 2019 (image2) and Windows Server 2016 (image3) images are blocked from running process-isolated because the build numbers differ. A Linux image (image4) can never share the Windows kernel.
Hyper-V isolation: image1, image2, image3, and image4. Hyper-V isolation runs each container in its own lightweight utility VM with its own kernel, so the image does not have to match the host build. The compatibility matrix for a Windows Server 2022 host lists Hyper-V isolation as supported for Windows Server 2022, 2019, and 2016 images. Linux containers on a Windows host always run inside a virtualized Linux kernel, so image4 also runs only with VM-based isolation. Running all four with Hyper-V isolation also maximizes isolation, as the question requires.
