Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Linux Foundation CKS Exam - Topic 1 Question 34 Discussion

TaskAnalyze and edit the given Dockerfile /home/candidate/KSSC00301/Docker file (based on the ubuntu:16.04 image), fixing two instructions present in the file that are prominent security/best-practice issues.Analyze and edit the given manifest file /home/candidate/KSSC00301/deployment.yaml, fixing two fields present in the file that are prominent security/best-practice issues.
A) Explanation:

Linux Foundation CKS Exam - Topic 1 Question 34 Discussion

Actual exam question for Linux Foundation's CKS exam
Question #: 34
Topic #: 1
[All CKS Questions]

Task

Analyze and edit the given Dockerfile /home/candidate/KSSC00301/Docker file (based on the ubuntu:16.04 image), fixing two instructions present in the file that are prominent security/best-practice issues.

Analyze and edit the given manifest file /home/candidate/KSSC00301/deployment.yaml, fixing two fields present in the file that are prominent security/best-practice issues.

Show Suggested Answer Hide Answer
Suggested Answer: A

by Cecil at Mar 22, 2023, 04:17 AM

Limited Time Offer

25%

Off

Get Premium CKS Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Brandee
9 months ago
I disagree, sometimes older images are necessary for compatibility.
upvoted 0 times
...
Delisa
9 months ago
Don't forget to set proper user permissions in the Dockerfile!
upvoted 0 times
...
Burma
9 months ago
Wait, are we really still using Ubuntu 16.04? That's surprising!
upvoted 0 times
...
Bong
9 months ago
Totally agree, outdated images can be a huge risk.
upvoted 0 times
...
Cyndy
10 months ago
Always use the latest base image for security!
upvoted 0 times
...
Valene
10 months ago
I think there was something about avoiding hardcoded secrets in the manifest. I hope I can spot that in the file.
upvoted 0 times
...
Natalie
10 months ago
I practiced a similar question where we had to update the base image. I wonder if we need to do that here too for security reasons.
upvoted 0 times
...
Man
10 months ago
I'm a bit unsure about the manifest file. I think we should check for resource limits, but I can't recall the exact syntax.
upvoted 0 times
...
Matilda
10 months ago
I remember we talked about using non-root users in Dockerfiles to enhance security. I think that might be one of the issues to fix.
upvoted 0 times
...
Nohemi
10 months ago
I'm focusing on option D - percentage of delinquent records seems like the most comprehensive metric to track overall performance
upvoted 0 times
...
Louis
10 months ago
This seems like a tricky question. I'll need to think carefully about the implications of each option.
upvoted 0 times
...

Save Cancel