Serverless and Container Security (Docker, Kubernetes) CSE Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   An organization uses serverless functions to process sensitive customer data. The security team wants to ensure that only authorized functions can access the data and that all access is auditable. Which approach should they implement?

   • AGrant all functions full access to the data store and enable logging only for failed access attempts.
   • BUse a shared service account for all functions and rely on network-level restrictions.
   • CEmbed the data store credentials in the function code and rotate them monthly.
   • DAssign each function a unique identity with least-privilege permissions and enable detailed audit logging on the data store.
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   A development team is deploying a serverless function that processes payment transactions. The function uses several third-party libraries, including one that is known to have a critical vulnerability. The team wants to ensure the function is secure before production deployment. Which action should the team take?

   • AUpdate the vulnerable library to a patched version and run a dependency scanner in the CI/CD pipeline.
   • BIncrease the function's memory and timeout to improve its resilience.
   • CAdd a Web Application Firewall (WAF) in front of the function to block exploit attempts.
   • DDisable the function's logging to reduce the attack surface.
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   Which of the following is a key security risk specific to serverless computing?

   • AEvent injection and insecure function dependencies
   • BInability to apply security patches to the underlying OS
   • CLack of encryption for data at rest
   • DIncreased attack surface due to the use of virtual machines
   Reveal Solution Discussion Select an answer first
5. 39foundation · easy

   Which phase of the container security lifecycle involves scanning the image for vulnerabilities before deployment?

   • AOrchestration phase
   • BDecommission phase
   • CBuild phase
   • DRuntime phase
   Reveal Solution Discussion Select an answer first
6. 40foundation · easy

   Which practice helps secure the runtime environment of a serverless function?

   • AGranting the function access to all cloud resources
   • BDisabling the function's timeout to allow long-running processes
   • CPinning dependencies to specific, known-good versions
   • DUsing the latest version of all dependencies without testing
   Reveal Solution Discussion Select an answer first