4.3 Identify Potential Security Issues — Such as Malware Presence, High-Severity Common Vulnerabilities and Exposures (CVEs), Detected Leaked Secrets and Docker File Misconfigurations — from the Image Assessment Report CCCS Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   An image assessment report lists the following findings: a critical CVE in a web server package, a leaked API key, and a Dockerfile instruction that runs as root. Which finding should be prioritized for remediation first?

   • AThe leaked API key, because it is a direct credential exposure.
   • BAll findings should be remediated at the same time.
   • CThe root user instruction, because it affects the entire container.
   • DThe critical CVE, because it has the highest severity score.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   An image assessment report for a payment processing service shows a CVE with a CVSS score of 9.8 in the OpenSSL library. The service is internet-facing and uses TLS. What should the team do first?

   • AUpdate the OpenSSL library to a patched version and rebuild the image
   • BAdd a network rule to block external access to the service
   • CIgnore the CVE because OpenSSL is a widely used library and exploits are unlikely
   • DDisable TLS and use plain HTTP to avoid the vulnerability
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Why is a leaked secret, such as a database password, considered a high security risk?

   • AIt indicates the image contains malicious code.
   • BIt causes the container to run with elevated privileges.
   • CIt means the image is outdated and needs to be rebuilt.
   • DIt could allow an attacker to access sensitive data or systems.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   An image assessment report for a container image used in a research environment flags a file named `cryptominer` in the `/tmp` directory. The image is used for data processing. What is the most likely implication of this finding?

   • AThe image may contain malware that could consume resources or exfiltrate data
   • BThe file is a false positive because it is in the /tmp directory
   • CThe file is a configuration file for a mining application
   • DThe file is likely a legitimate tool used for research purposes
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   When prioritizing security issues from an image assessment report, which factor should be considered first?

   • AThe size of the image.
   • BThe number of issues found in the image.
   • CThe age of the image.
   • DThe severity of the issue, such as critical or high.
   Reveal Solution Discussion Select an answer first