Se a vaga pede Cloud / AWS, vale saber responder isso. A resposta está em inglês de propósito, porque é assim que você vai precisar falar.
An image packages filesystem layers and configuration. A container is an instance with its own runtime state and writable layer. A container can also be stopped, and an image tag can move to a different image.
Dockerfile instructions can span lines. RUN, COPY, and ADD can create filesystem changes, while CMD and LABEL set configuration metadata. Cache reuse depends on instructions and inputs, so changed inputs can invalidate later steps.
A multi-stage build can copy required artifacts into a smaller runtime image and omit build tools. That can reduce size and attack surface, but the final contents, base-image maintenance, permissions, and secrets handling still determine security.
Source: Docker multi-stage builds.
Ler é o primeiro passo. No app, essa pergunta vira flashcard com repetição espaçada, e o módulo tem quiz e simulado para testar o que ficou.
Treinar essa pergunta no app