Which of the following is BEST described by the statement containers that access an disks mounted on the host and have read-write access to files''?

The statement describes a container that has broken its isolation and gained read-write access to the host's filesystem. This is a critical security vulnerability and a primary risk associated with running a container in "privileged" mode. Privileged containers are granted capabilities that effectively disable the security boundaries between the container and the host, allowing for such dangerous access. This scenario represents a failure of container security, not a requirement or benefit.

B. Container credentials are for authenticating to external services (like a database or cloud API), not for accessing the host filesystem.
C. This is the direct opposite of the described situation. Container isolation is the security mechanism designed to prevent a container from accessing the host's disks.
D. Container immutability is a best practice to prevent changes to running containers, but it is a separate concept from the container's access privileges to the host system.

1. National Institute of Standards and Technology (NIST). (2017). NIST Special Publication 800-190: Application Container Security Guide. https://doi.org/10.6028/NIST.SP.800-190 (Section 3.2, "Risks Associated with the Use of Containers," explicitly lists container breakout to the host as a major risk, often enabled by excessive privileges).

2. Docker Documentation. (n.d.). Runtime privilege and Linux capabilities. Docker Inc. (The official documentation warns that the --privileged flag gives a container "all capabilities" and access to all devices on the host, and advises against its use due to the significant security risks).