Malicious Code Execution and Compromised Applications in Containers KCSA Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which activity would be considered a suspicious file change in a container?

   • AThe container creating temporary files in /tmp
   • BThe container reading environment variables
   • CThe container writing logs to stdout
   • DModification of system binaries or configuration files that are not part of the application's normal operation
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   How can vulnerable container images introduce malicious code into an application?

   • ABy increasing the container's CPU usage
   • BBy exploiting known vulnerabilities in the software packages included in the image
   • CBy blocking all network traffic to the container
   • DBy automatically changing the Kubernetes cluster configuration
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which of the following is an indicator of compromise (IoC) in a containerized application?

   • AUnexpected outbound network connections from the container
   • BThe container having a low CPU usage
   • CThe container running as a non-root user
   • DThe container image being pulled from a public registry
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is a primary risk of using untrusted container images?

   • AThey are always larger in size and consume more storage
   • BThey may contain malicious code or vulnerable software that can compromise the application
   • CThey cannot be scanned by any security tools
   • DThey are incompatible with Kubernetes
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   How does the principle of least privilege help mitigate the impact of a container breakout?

   • ABy encrypting all data in the container
   • BBy automatically patching vulnerabilities in the container image
   • CBy blocking all network traffic to the container
   • DBy limiting the permissions and capabilities of the container, so an attacker has fewer privileges to abuse
   Reveal Solution Discussion Select an answer first