Which of the following is a recommended practice for securing container network traffic?

Disabling all network communication between containers

Using the same network for all containers to simplify management

Encrypting traffic between containers using TLS or mTLS

Allowing containers to communicate freely without restrictions

What is the primary purpose of secrets management in a container environment?

To automatically update container images with the latest patches

To securely store and control access to sensitive data like passwords and API keys

To encrypt all network traffic between containers

To monitor container runtime behavior for anomalies

A company runs a containerized application that needs to access a database. The database credentials are stored in a Kubernetes Secret. The security team wants to ensure that the credentials are not exposed to developers who can view secrets in the cluster. What should be implemented?

Use a Kubernetes Secret but set the secret's permissions to 777 so all users can access it.

Use Kubernetes RBAC to restrict access to the Secret to only the service account used by the application.

Store the credentials in a ConfigMap instead of a Secret.

Embed the credentials in the container image.

What is the purpose of runtime security monitoring for containers?

To prevent containers from being stopped or restarted

To automatically update the container image to the latest version

To detect and respond to suspicious activity or anomalies during container execution

To encrypt all network traffic between containers

What is the primary purpose of scanning container images for vulnerabilities?

To reduce the size of the container image by removing unnecessary files

To ensure the image runs without errors in the production environment

To verify that the image was built from a trusted base image

To identify known security weaknesses in the image's software components before deployment

CompTIACloud+

Domain 4Objective 3

Container Security CV0-004 Practice Questions (Page 2)

Part of the Security domain, which accounts for 19% of the CV0-004 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~7–11 in this domain), expect 1–2 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

8concepts

19%of the exam

Questions 6–10

6foundation · easy
Which of the following is a recommended practice for securing container network traffic?
Select an answer first
7foundation · easy
What is the primary purpose of secrets management in a container environment?
Select an answer first
8application · medium
A company runs a containerized application that needs to access a database. The database credentials are stored in a Kubernetes Secret. The security team wants to ensure that the credentials are not exposed to developers who can view secrets in the cluster. What should be implemented?
Select an answer first
9foundation · easy
What is the purpose of runtime security monitoring for containers?
Select an answer first
10foundation · easy
What is the primary purpose of scanning container images for vulnerabilities?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CV0-004

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CV0-004” is a trademark of its owner, used for identification only.