ExamGecko
Question list
Search
Search

Question 57 - PCSFE discussion

Report
Export

Why are containers uniquely suitable for runtime security based on allow lists?

A.
Containers have only a few defined processes that should ever be executed.
Answers
A.
Containers have only a few defined processes that should ever be executed.
B.
Developers define the processes used in containers within the Dockerfile.
Answers
B.
Developers define the processes used in containers within the Dockerfile.
C.
Docker has a built-in runtime analysis capability to aid in allow listing.
Answers
C.
Docker has a built-in runtime analysis capability to aid in allow listing.
D.
Operations teams know which processes are used within a container.
Answers
D.
Operations teams know which processes are used within a container.
Suggested answer: A

Explanation:

Containers are uniquely suitable for runtime security based on allow lists because containers have only a few defined processes that should ever be executed. Developers can specify the processes that are allowed to run in a container using a Dockerfile, but this does not guarantee that only those processes will run at runtime. Therefore, using an allow list approach can prevent any unauthorized or malicious processes from running in a container2. Reference: Container Security

asked 23/09/2024
James Scott
42 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first