What is a governance policy in the context of containerized environments?

A network protocol for container communication

A tool that automatically scales containers based on load

A set of rules that define who can deploy containers and what images are allowed

A backup strategy for container data

A company runs a multi-tier application in containers: a frontend, a backend API, and a database. They want to ensure that the frontend can only communicate with the backend and the backend only with the database. Which network security measure should they implement?

Use separate networks for each tier and configure network policies to allow only the required traffic between tiers.

Expose all container ports to the host to simplify connectivity.

Encrypt traffic between containers using TLS, but keep them on the same network.

Place all containers in the same network and rely on application-level authentication.

Which of the following is a secure approach for managing secrets in a containerized environment?

Using a dedicated secrets management tool like HashiCorp Vault

Storing secrets in environment variables in the Dockerfile

Sharing secrets via unencrypted network shares

Hardcoding secrets in the application source code

How do containers achieve isolation from each other on the same host?

By assigning each container a unique IP address on the host network

By encrypting the host's memory

Using kernel namespaces and control groups (cgroups)

By running each container in a separate virtual machine

A DevOps team runs a containerized web application on a shared Kubernetes cluster. A security audit recommends reducing the impact of a container escape. Which configuration change would BEST achieve this goal?

Increase the number of replicas for each deployment

Store all application secrets in environment variables

Run containers with a read-only root filesystem and drop all Linux capabilities

Disable all container logs to reduce the attack surface

EC-CouncilNetwork Defense Essentials

Domain 4Objective 2

Containerization Technologies and Security Challenges NDE Practice Questions (Page 6)

Part of the Virtualization and Cloud Computing Security domain, which makes up ~12% of our current practice bank.

54questions here

11free pages

10concepts

10 Concepts in This Objective

Containerization fundamentals
Container orchestration basics
Container security challenges
Container isolation and kernel security
Securing container images
Container runtime security
Container network security
Container secrets management
Container monitoring and logging
Compliance and governance for containers

Questions 26–30

26foundation · easy
What is a governance policy in the context of containerized environments?
Select an answer first
27application · medium
A company runs a multi-tier application in containers: a frontend, a backend API, and a database. They want to ensure that the frontend can only communicate with the backend and the backend only with the database. Which network security measure should they implement?
Select an answer first
28foundation · easy
Which of the following is a secure approach for managing secrets in a containerized environment?
Select an answer first
29foundation · easy
How do containers achieve isolation from each other on the same host?
Select an answer first
30application · medium
A DevOps team runs a containerized web application on a shared Kubernetes cluster. A security audit recommends reducing the impact of a container escape. Which configuration change would BEST achieve this goal?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NDE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “NDE” is a trademark of its owner, used for identification only.