Discuss Linux Foundation CKS Exam Topic 1 Question 2

SIMULATION

Use the kubesec docker images to scan the given YAML manifest, edit and apply the advised changes, and passed with a score of 4 points.

kubesec-test.yaml

apiVersion: v1

kind: Pod

metadata:

name: kubesec-demo

spec:

containers:

- name: kubesec-demo

image: gcr.io/google-samples/node-hello:1.0

securityContext:

readOnlyRootFilesystem: true

Hint:docker run -i kubesec/kubesec:512c5e0 scan /dev/stdin < kubesec-test.yaml

ASend us the Feedback on it.

Suggested Answer: A

Get Premium CKS Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

13 comments · newest first

Lynette 1 year ago

Are you sure the image is still valid?

Cordell 1 year ago

Definitely agree, the readOnlyRootFilesystem is a must!

Yvonne 1 year ago

Wait, you can use kubesec with Docker?

Leonard 1 year ago

Nice! I thought it would be harder.

Kanisha 1 year ago

Just ran the scan, got a score of 4!

Percy 1 year ago

I vaguely remember needing to set some additional security settings, but I can't recall if it was about resource limits or something else.

Tarra 1 year ago

The hint about using `docker run` is helpful, but I still feel a bit lost on what exactly to edit in the YAML manifest.

Berry 1 year ago

I think we had a similar question in our last mock exam where we had to adjust security contexts. I hope I can recall those details!

Hayley 1 year ago

I remember we practiced using kubesec to scan YAML files, but I'm a bit unsure about the specific changes needed to pass with a score of 4 points.

Louis 1 year ago

Okay, let me break this down step-by-step. Copy the file, set the ownership, remove the execute bit, and then use setfacl to manage the user permissions. I think if I go through it methodically, I can get this done.

Ceola 1 year ago

I think to find the percentage for rents under $510, we have to look at the cumulative frequency, but I'm not entirely sure how to do that.

Floyd 1 year ago

I remember we talked about standardization in service contracts, but I'm unsure which part is most commonly standardized.

Valentin 1 year ago

I initially thought assigning a mobile extension could work, but now I feel like it's more about user and device association.

Linux Foundation CKS Exam - Topic 1 Question 2 Discussion