Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Linux Foundation CKS Exam - Topic 1 Question 2 Discussion

SIMULATIONUse the kubesec docker images to scan the given YAML manifest, edit and apply the advised changes, and passed with a score of 4 points.kubesec-test.yamlapiVersion: v1kind: Podmetadata:name: kubesec-demospec:containers:- name: kubesec-demoimage: gcr.io/google-samples/node-hello:1.0securityContext:readOnlyRootFilesystem: trueHint:docker run -i kubesec/kubesec:512c5e0 scan /dev/stdin < kubesec-test.yaml
A) Send us the Feedback on it.

Linux Foundation CKS Exam - Topic 1 Question 2 Discussion

Actual exam question for Linux Foundation's CKS exam
Question #: 2
Topic #: 1
[All CKS Questions]

SIMULATION

Use the kubesec docker images to scan the given YAML manifest, edit and apply the advised changes, and passed with a score of 4 points.

kubesec-test.yaml

apiVersion: v1

kind: Pod

metadata:

name: kubesec-demo

spec:

containers:

- name: kubesec-demo

image: gcr.io/google-samples/node-hello:1.0

securityContext:

readOnlyRootFilesystem: true

Hint:docker run -i kubesec/kubesec:512c5e0 scan /dev/stdin < kubesec-test.yaml

Show Suggested Answer Hide Answer
Suggested Answer: A

by Izetta at May 09, 2022, 05:23 PM

Limited Time Offer

25%

Off

Get Premium CKS Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Lynette
9 months ago
Are you sure the image is still valid?
upvoted 0 times
...
Cordell
9 months ago
Definitely agree, the readOnlyRootFilesystem is a must!
upvoted 0 times
...
Yvonne
10 months ago
Wait, you can use kubesec with Docker?
upvoted 0 times
...
Leonard
10 months ago
Nice! I thought it would be harder.
upvoted 0 times
...
Kanisha
10 months ago
Just ran the scan, got a score of 4!
upvoted 0 times
...
Percy
10 months ago
I vaguely remember needing to set some additional security settings, but I can't recall if it was about resource limits or something else.
upvoted 0 times
...
Tarra
10 months ago
The hint about using `docker run` is helpful, but I still feel a bit lost on what exactly to edit in the YAML manifest.
upvoted 0 times
...
Berry
10 months ago
I think we had a similar question in our last mock exam where we had to adjust security contexts. I hope I can recall those details!
upvoted 0 times
...
Hayley
10 months ago
I remember we practiced using kubesec to scan YAML files, but I'm a bit unsure about the specific changes needed to pass with a score of 4 points.
upvoted 0 times
...
Louis
10 months ago
Okay, let me break this down step-by-step. Copy the file, set the ownership, remove the execute bit, and then use setfacl to manage the user permissions. I think if I go through it methodically, I can get this done.
upvoted 0 times
...
Ceola
10 months ago
I think to find the percentage for rents under $510, we have to look at the cumulative frequency, but I'm not entirely sure how to do that.
upvoted 0 times
...
Floyd
10 months ago
I remember we talked about standardization in service contracts, but I'm unsure which part is most commonly standardized.
upvoted 0 times
...
Valentin
10 months ago
I initially thought assigning a mobile extension could work, but now I feel like it's more about user and device association.
upvoted 0 times
...

Save Cancel