MENU
Using the runtime detection tool Falco, Analyse the container behavior for at least 20 seconds, using filters that detect newly spawning and executing processes in a single container of Nginx.
Suggested Answer: A
Get Premium CKS Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
12 comments · newest first
TE
Tess
1 year ago
Yeah, but still, 20 seconds can catch a lot!
SA
Sabrina
1 year ago
I think it only logs suspicious ones, right?
LI
Lisandra
1 year ago
Wait, does it really log every single process? Sounds excessive.
JA
James
1 year ago
Agreed, the process detection is super useful.
HU
Hubert
1 year ago
Just ran Falco on Nginx for 20 seconds. Works great!
AU
Augustine
1 year ago
I definitely need to double-check how to store the incident file at /opt/falco-incident.txt. I hope I remember the right commands!
MA
Malcolm
1 year ago
I feel a bit confused about the incident file format. Is it really just timestamp, uid, and processName?
MI
Micaela
1 year ago
I think we had a similar question in our last mock exam about detecting processes. I should be able to adapt that knowledge here.
AL
Alverta
1 year ago
I remember practicing with Falco, but I'm not entirely sure how to set the filters correctly for Nginx.
AL
Aleta
1 year ago
I feel pretty confident about this one. Gathering employee metrics right after the Agile Release Train launches seems like the best way to get a pulse on satisfaction early on. Then you can address any problem areas.
MI
Mitzie
1 year ago
Hmm, I'm not sure about the certificate mismatch option. I'll need to double-check the configurations to see if that's a possibility.
ST
Stephaine
1 year ago
Hmm, I'm a bit unsure about this one. Is the cultural assessment just about the formal relationships, or is it more about the overall organizational culture and how that impacts the current state?