Test understanding of Docker container concepts: how images are constructed from layered filesystems and cached, image lifecycle and registries (publishing, pulling, tagging, immutability), and runtime isolation mechanisms (namespaces, cgroups, union/overlay filesystems); assess ability to reason about layer reuse and optimization, registry workflows and security considerations, and the isolation guarantees and limitations of containers versus virtual machines.