MENU
Task
Analyze and edit the given Dockerfile /home/candidate/KSSC00301/Docker file (based on the ubuntu:16.04 image), fixing two instructions present in the file that are prominent security/best-practice issues.
Analyze and edit the given manifest file /home/candidate/KSSC00301/deployment.yaml, fixing two fields present in the file that are prominent security/best-practice issues.
Suggested Answer: A
Get Premium CKS Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
11 comments · newest first
BR
Brandee
12 months ago
I disagree, sometimes older images are necessary for compatibility.
DE
Delisa
1 year ago
Don't forget to set proper user permissions in the Dockerfile!
BU
Burma
1 year ago
Wait, are we really still using Ubuntu 16.04? That's surprising!
BO
Bong
1 year ago
Totally agree, outdated images can be a huge risk.
CY
Cyndy
1 year ago
Always use the latest base image for security!
VA
Valene
1 year ago
I think there was something about avoiding hardcoded secrets in the manifest. I hope I can spot that in the file.
NA
Natalie
1 year ago
I practiced a similar question where we had to update the base image. I wonder if we need to do that here too for security reasons.
MA
Man
1 year ago
I'm a bit unsure about the manifest file. I think we should check for resource limits, but I can't recall the exact syntax.
MA
Matilda
1 year ago
I remember we talked about using non-root users in Dockerfiles to enhance security. I think that might be one of the issues to fix.
NO
Nohemi
1 year ago
I'm focusing on option D - percentage of delinquent records seems like the most comprehensive metric to track overall performance
LO
Louis
1 year ago
This seems like a tricky question. I'll need to think carefully about the implications of each option.