Cloud Concepts and Container Technology CEH Practice Questions (Page 7)

Questions 31–32

1. 31expert · hard

   A security team is evaluating container security. They have a requirement to run containers with the least privilege possible, but they also need to allow a container to bind to a privileged port (e.g., port 80) on the host. Which approach balances security and functionality?

   • ARun the container as root and use host networking
   • BDisable the container's network namespace
   • CUse a non-root user inside the container and configure the host to allow port binding via iptables or a reverse proxy
   • DEnable privileged mode for the container
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   Which of the following is a best practice for securing container images?

   • AScan images for vulnerabilities before deployment and use minimal base images.
   • BStore images in a public registry to benefit from community security reviews.
   • CRun containers with root privileges to ensure they have all necessary permissions.
   • DDisable all security features in the container runtime to improve performance.
   Reveal Solution Discussion Select an answer first