Appropriately Use Kernel Hardening Tools Such as AppArmor, Seccomp CKS Practice Questions (Page 5)

Questions 21–22

1. 21application · medium

   A developer wants to understand the difference between seccomp and AppArmor. Which statement is correct?

   • ASeccomp filters system calls, while AppArmor restricts file access and capabilities.
   • BSeccomp is used to restrict network access, while AppArmor is used to restrict system calls.
   • CSeccomp is a mandatory access control system, while AppArmor is a discretionary access control system.
   • DSeccomp and AppArmor are interchangeable and can be used in place of each other.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Where are custom seccomp profiles typically stored on a Kubernetes node?

   • AIn the container image's /etc/seccomp directory
   • BIn the directory /etc/seccomp
   • CIn the Kubernetes API server's configuration directory
   • DIn the directory /var/lib/kubelet/seccomp
   Reveal Solution Discussion Select an answer first