A company is deciding between using VMs and containers for a multi-tenant SaaS application. They need strong isolation between tenants and the ability to run different operating systems for different tenants. Which approach is more appropriate?

Use VMs because each VM has its own kernel, providing stronger isolation and the ability to run different OSes.

Use containers because they are lighter and provide stronger isolation than VMs.

Use VMs for the control plane and containers for the data plane to balance isolation and performance.

Use containers with a hypervisor to provide the same isolation as VMs.

Why is network segmentation important in container environments?

It automatically encrypts all container traffic

It increases the speed of container-to-container communication

It eliminates the need for container firewalls

It limits the blast radius if one container is compromised

A security operations team suspects that a container in a Kubernetes cluster is performing DNS tunneling to exfiltrate data. They have access to the cluster's monitoring tools. Which monitoring approach would MOST EFFECTIVELY confirm this suspicion?

Review the container image's vulnerability scan report

Check the Kubernetes audit logs for pod creation events

Monitor only CPU and memory usage of the containers

Enable DNS query logging and correlate with container process activity

What is the purpose of applying compliance frameworks to containerized environments?

To automatically fix all security vulnerabilities

To eliminate the need for container monitoring

To speed up container deployment

To ensure the environment meets regulatory and organizational security requirements

EC-CouncilNetwork Defense Essentials

Domain 4Objective 2

Containerization Technologies and Security Challenges NDE Practice Questions (Page 11)

Part of the Virtualization and Cloud Computing Security domain, which makes up ~12% of our current practice bank.

54questions here

11free pages

10concepts

10 Concepts in This Objective

Containerization fundamentals
Container orchestration basics
Container security challenges
Container isolation and kernel security
Securing container images
Container runtime security
Container network security
Container secrets management
Container monitoring and logging
Compliance and governance for containers

Questions 51–54

51expert · hard
A company is deciding between using VMs and containers for a multi-tenant SaaS application. They need strong isolation between tenants and the ability to run different operating systems for different tenants. Which approach is more appropriate?
Select an answer first
52foundation · easy
Why is network segmentation important in container environments?
Select an answer first
53expert · hard
A security operations team suspects that a container in a Kubernetes cluster is performing DNS tunneling to exfiltrate data. They have access to the cluster's monitoring tools. Which monitoring approach would MOST EFFECTIVELY confirm this suspicion?
Select an answer first
54foundation · easy
What is the purpose of applying compliance frameworks to containerized environments?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to NDE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “NDE” is a trademark of its owner, used for identification only.