A security team is reviewing a Kubernetes cluster that runs containerized workloads. They discover that containers are running as root, images are pulled from public registries without verification, and secrets are stored in environment variables. The team must reduce the risk of container breakout and credential exposure without disrupting the ability to deploy quickly. Which set of actions best addresses these issues?

Enforce a pod security policy that runs containers as non-root, use signed images from a private registry, and store secrets in Kubernetes Secrets mounted as files

Keep containers running as root but add network policies to restrict egress traffic

Switch to a different container runtime that does not use the host kernel

Use Kubernetes Secrets in environment variables and enable audit logging

A security team is reviewing a Kubernetes cluster. They find that the kubelet on each node is running with admin privileges and that the API server is exposed to the internet. They also notice that the etcd database is not encrypted. Which set of actions should they take to reduce the risk of cluster compromise?

Disable the kubelet and use only static pods

Restrict kubelet permissions, place the API server behind a firewall, and enable encryption for etcd

Expose the API server to the internet but require strong passwords

Use a different container runtime that is more secure

A DevOps team is deploying a stateless web application that needs to handle variable traffic. They want to use containers and need a solution that can automatically scale the number of container instances based on CPU usage. Which approach should they use?

Use Docker Compose with a load balancer

Run a single container on a large VM

Manually start additional containers on different hosts

Use Kubernetes with Horizontal Pod Autoscaler

Which of the following is a common use case for container technology?

Providing hardware-level isolation for multi-tenant cloud environments

Packaging a microservice with its dependencies for consistent deployment across environments

Running a full virtual desktop environment for each user

Replacing the hypervisor in a data center to manage physical servers

A development team wants to ensure that their application runs identically in development, testing, and production environments. They are considering containerization. Which benefit of containers directly addresses this requirement?

Containers bundle the application with its dependencies and runtime

Containers automatically scale applications

Containers are more secure than virtual machines

Containers provide better isolation than virtual machines

EC-CouncilCertified Ethical Hacker

Domain 8Objective 1

Cloud Concepts and Container Technology CEH Practice Questions (Page 2)

Part of the Cloud Computing domain, which makes up ~7% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~7–11 in this domain), expect 2–3 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

6concepts

Questions 6–10

6expert · hard
A security team is reviewing a Kubernetes cluster that runs containerized workloads. They discover that containers are running as root, images are pulled from public registries without verification, and secrets are stored in environment variables. The team must reduce the risk of container breakout and credential exposure without disrupting the ability to deploy quickly. Which set of actions best addresses these issues?
Select an answer first
7expert · hard
A security team is reviewing a Kubernetes cluster. They find that the kubelet on each node is running with admin privileges and that the API server is exposed to the internet. They also notice that the etcd database is not encrypted. Which set of actions should they take to reduce the risk of cluster compromise?
Select an answer first
8application · medium
A DevOps team is deploying a stateless web application that needs to handle variable traffic. They want to use containers and need a solution that can automatically scale the number of container instances based on CPU usage. Which approach should they use?
Select an answer first
9foundation · easy
Which of the following is a common use case for container technology?
Select an answer first
10application · medium
A development team wants to ensure that their application runs identically in development, testing, and production environments. They are considering containerization. Which benefit of containers directly addresses this requirement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

Cloud Concepts and Container Technology CEH Practice Questions (Page 2)

Questions 6–10

A DevOps team is deploying a stateless web application that needs to handle variable traffic. They want to use containers and need a solution that can automatically scale the number of container instances based on CPU usage. Which approach should they use?

Which of the following is a common use case for container technology?

A development team wants to ensure that their application runs identically in development, testing, and production environments. They are considering containerization. Which benefit of containers directly addresses this requirement?

Keep studying — Cloud Computing