CompTIA Linux+ XK0-006 (V8) Practice Question

The correct answer is --privileged. This flag grants the container all Linux kernel capabilities and removes many of the security restrictions enforced by the container runtime, such as seccomp profiles, AppArmor/SELinux separation, and limitations on device access. This effectively allows a process inside the container to have almost the same level of access as a root process on the host. The --device flag is used to grant access to a specific host device, not broad, root-level privileges. The --security-opt flag is used to configure specific security options like AppArmor profiles, seccomp profiles, or SELinux labels, but it does not grant full privileged access on its own. The --cap-add flag is used to add specific kernel capabilities, which is a more granular and secure approach than using --privileged, but it does not grant the all-encompassing access that --privileged does.