What is the purpose of network segmentation in a container environment?

To ensure that all containers use the same IP address for simplicity

To encrypt all data stored inside the container

To increase the speed of container-to-container communication

To limit communication between containers to only what is necessary

A company runs multiple containerized microservices on a single Docker host. The security team requires that a compromise of one container must not allow an attacker to access the network traffic or filesystem of another container running on the same host. Which configuration should be implemented?

Place all containers on the same bridge network and rely on the host firewall to filter traffic between them.

Assign each container a static IP address on the same subnet and use network policies in the container runtime to block traffic.

Run each container with its own user namespace and attach it to a separate user-defined bridge network with no inter-container communication enabled.

Use the host network mode for all containers so that they share the host's network stack and can be managed by the same iptables rules.

What is the primary goal of patch management in a container environment?

To encrypt all data stored in container images

To regularly update container images and runtimes to mitigate known vulnerabilities

To enforce access control policies for containers

To monitor container performance and resource usage

An organization runs a containerized web application in a Kubernetes cluster. The application needs to communicate with a legacy database that is not containerized and resides on a separate VLAN. The security team requires that all traffic between the containers and the database be encrypted and that only the web application pods can reach the database. What should be configured?

Use a Kubernetes Ingress controller to route traffic from the web application to the database, and enable HTTPS on the Ingress.

Place the database in the same Kubernetes cluster and use a ClusterIP Service, then rely on the cluster's internal network encryption.

Expose the database as a Kubernetes Service and allow all pods to access it, relying on the database's own authentication to secure it.

Create a Kubernetes NetworkPolicy that allows ingress from the web application pods to the database's IP range, and configure the database to accept only TLS connections.

Which of the following is a common method used to isolate containers from each other and from the host?

Applying Linux namespaces and control groups (cgroups)

Encrypting the container's filesystem with a different key for each container

Using a hypervisor to run each container in a separate virtual machine

Assigning each container a unique IP address on the same network

CompTIACloud+

Domain 4Objective 3

Container Security CV0-004 Practice Questions (Page 5)

Part of the Security domain, which accounts for 19% of the CV0-004 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~7–11 in this domain), expect 1–2 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

8concepts

19%of the exam

Questions 21–25

21foundation · easy
What is the purpose of network segmentation in a container environment?
Select an answer first
22application · medium
A company runs multiple containerized microservices on a single Docker host. The security team requires that a compromise of one container must not allow an attacker to access the network traffic or filesystem of another container running on the same host. Which configuration should be implemented?
Select an answer first
23foundation · easy
What is the primary goal of patch management in a container environment?
Select an answer first
24application · medium
An organization runs a containerized web application in a Kubernetes cluster. The application needs to communicate with a legacy database that is not containerized and resides on a separate VLAN. The security team requires that all traffic between the containers and the database be encrypted and that only the web application pods can reach the database. What should be configured?
Select an answer first
25foundation · easy
Which of the following is a common method used to isolate containers from each other and from the host?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CV0-004

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CV0-004” is a trademark of its owner, used for identification only.