4.3 Identify Potential Security Issues — Such as Malware Presence, High-Severity Common Vulnerabilities and Exposures (CVEs), Detected Leaked Secrets and Docker File Misconfigurations — from the Image Assessment Report CCCS Practice Questions (Page 6)

Questions 26–27

1. 26application · medium

   A security engineer reviews an image assessment report for a container image that will be deployed to production. The report lists a critical CVE in the base OS packages, a high-severity CVE in a rarely used utility, a leaked AWS access key in a configuration file, and a Dockerfile instruction that runs the container as root. The team has limited time before the deployment window. Which issue should the engineer prioritize for immediate remediation?

   • AThe high-severity CVE in the rarely used utility
   • BThe Dockerfile instruction running as root
   • CThe leaked AWS access key
   • DThe critical CVE in the base OS packages
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   An organization has a strict deployment deadline for a customer-facing application. The image assessment report shows a critical CVE in a library that is not used in the application's runtime path, a high-severity CVE in a library that is used and exposed to the internet, and a Dockerfile misconfiguration that runs the container as root. The team has time to fix only one issue before the deadline. Which issue should they fix to best reduce risk?

   • AThe Dockerfile misconfiguration running as root
   • BAll three issues, because security cannot be compromised
   • CThe high-severity CVE in the used and exposed library
   • DThe critical CVE in the unused library
   Reveal Solution Discussion Select an answer first