Containerization Technologies and Security Challenges NDE Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A startup is deploying a microservices application with multiple containers that need to scale independently and self-heal. They want to minimize the operational overhead of managing container placement and scaling. Which technology should they choose?

   • AKubernetes
   • BA container registry
   • CDocker Engine
   • DDocker Compose
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Why is logging important in a containerized environment from a security perspective?

   • AIt provides an audit trail for detecting and investigating security incidents
   • BIt reduces the number of containers needed
   • CIt encrypts container data at rest
   • DIt automatically blocks malicious traffic
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   An organization is adopting a policy that all container images must be free of known critical vulnerabilities before deployment. Which combination of practices should be implemented to enforce this policy?

   • AUse only the latest base images without scanning
   • BRequire developers to manually review each image for vulnerabilities
   • CScan images with a vulnerability scanner and block deployment if critical vulnerabilities are found
   • DSign all images with a private key but do not scan them
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A containerized application runs as root inside the container and has a writable root filesystem. A security review recommends reducing the impact of a potential container breakout. Which configuration change is most effective?

   • ADisable logging for the container to reduce the attack surface.
   • BRun the container with a non-root user, set the root filesystem to read-only, and drop all Linux capabilities except those required.
   • CKeep the container running as root but restrict network access to the container.
   • DUse a larger base image to include more security tools inside the container.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Why is running a container with a read-only root filesystem considered a security measure?

   • AIt speeds up the container startup time
   • BIt prevents attackers from modifying files inside the container
   • CIt enables the container to share files with the host
   • DIt allows the container to use less memory
   Reveal Solution Discussion Select an answer first