A development team uses Docker containers to deploy a web application. A security scan reveals that the base image contains a known critical vulnerability. Which of the following is the most appropriate action?

Rebuild the image using a patched base image and redeploy

Run the container with reduced privileges

Use a container runtime that provides stronger isolation

Add a network policy to restrict the container's egress traffic

Which of the following is a common vulnerability in server-based systems?

Unpatched software vulnerabilities

Lack of physical security for edge devices

Weak default credentials on IoT devices

Certified Information Systems Security Professional

Domain 3Objective 5

3.5 - Assess and Mitigate the Vulnerabilities of Security Architectures, Designs, and Solution Elements CISSP Practice Questions (Page 6)

Part of the Security Architecture and Engineering domain, which accounts for 13% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~9–16 in this domain), expect 1–2 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

15concepts

13%of the exam

Questions 26–29

26foundation · easy
Which of the following is a common vulnerability in database systems related to access control?
Select an answer first
27foundation · easy
Which of the following is a common vulnerability in distributed systems?
Select an answer first
28application · medium
A development team uses Docker containers to deploy a web application. A security scan reveals that the base image contains a known critical vulnerability. Which of the following is the most appropriate action?
Select an answer first
29foundation · easy
Which of the following is a common vulnerability in server-based systems?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.

3.5 - Assess and Mitigate the Vulnerabilities of Security Architectures, Designs, and Solution Elements CISSP Practice Questions (Page 6)

Questions 26–29

Which of the following is a common vulnerability in database systems related to access control?

Which of the following is a common vulnerability in distributed systems?

A development team uses Docker containers to deploy a web application. A security scan reveals that the base image contains a known critical vulnerability. Which of the following is the most appropriate action?

Which of the following is a common vulnerability in server-based systems?

Keep studying — Security Architecture and Engineering