Why is it important to use trusted base images in container builds?

To allow the image to run on any operating system

To ensure the image is automatically encrypted

To speed up the build process by skipping compilation

To reduce the risk of inheriting vulnerabilities or malicious code from the base image

Your organization is building a new application and needs to choose a base image. The security team emphasizes supply chain security. Which base image choice is most aligned with this goal?

A minimal, officially maintained base image from a trusted source, such as a distroless image.

A large, feature-rich base image from a public repository to avoid compatibility issues.

A base image that has been downloaded many times from a public registry.

A base image that is not updated frequently to ensure stability.

Your company stores proprietary container images in a public registry. You need to reduce the risk of unauthorized access and ensure images are not publicly downloadable. What is the most effective first step?

Set the registry to require multi-factor authentication for all users.

Move images to a private registry and configure authentication for all pulls.

Enable image signing on the public registry to verify image integrity.

Use a vulnerability scanner to identify and fix security issues in the images.

What is the primary purpose of integrity verification for container images stored in a repository?

To control which users can push or pull images

To encrypt the image data while it is stored in the repository

To ensure the image has not been tampered with or corrupted

To scan the image for known vulnerabilities

Kubernetes and Cloud Native Security Associate (KCSA)

Domain 4Objective 2

Image Repository KCSA Practice Questions (Page 1)

Part of the Platform Security domain, which accounts for 16% of the KCSA exam. Linux Foundation does not publish an official question count, but from its 90-minute exam (~35–60 total, ~6–10 in this domain), expect 1–1 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

6concepts

16%of the exam

Questions 1–5

1foundation · easy
Why is it important to use trusted base images in container builds?
Select an answer first
2application · medium
Your organization is building a new application and needs to choose a base image. The security team emphasizes supply chain security. Which base image choice is most aligned with this goal?
Select an answer first
3application · medium
Your company stores proprietary container images in a public registry. You need to reduce the risk of unauthorized access and ensure images are not publicly downloadable. What is the most effective first step?
Select an answer first
4foundation · easy
What is the primary purpose of integrity verification for container images stored in a repository?
Select an answer first
5foundation · easy
Which security mechanism is used by an image repository to verify that a client is who it claims to be before allowing access?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to KCSA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Foundation. “KCSA” is a trademark of its owner, used for identification only.