MENU
Cluster:scanner Master node:controlplane Worker node:worker1
You can switch the cluster/configuration context using the following command:
[desk@cli] $kubectl config use-context scanner
Given: You may use Trivy's documentation.
Task: Use the Trivy open-source container scanner to detect images with severe vulnerabilities used by Pods in the namespacenato.
Look for images withHighorCriticalseverity vulnerabilities and delete the Pods that use those images. Trivy is pre-installed on the cluster's master node. Use cluster's master node to use Trivy.
Suggested Answer: A
Get Premium CKS Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
41 comments · newest first
LU
Luke
11 months ago
I thought we were supposed to use the worker nodes for this?
DA
Daniel
12 months ago
Just ran it, found a few critical issues. Yikes!
AR
Ardella
12 months ago
Wait, is Trivy really pre-installed on the master node?
KA
Karon
1 year ago
Totally agree, it's a must-have tool for security!
ST
Stephaine
1 year ago
Trivy is super useful for scanning vulnerabilities!
CO
Coleen
1 year ago
I believe the command to delete the Pods is something like `kubectl delete pod`, but I need to double-check the syntax for specifying the Pods with vulnerabilities.
SH
Shantay
1 year ago
I feel a bit confused about the context switching. Do I need to confirm I'm in the right namespace before running the Trivy scan?
SH
Shaun
1 year ago
I think we had a similar question in our last mock exam about deleting Pods after scanning. I hope I can recall the exact commands needed.
AN
Anissa
1 year ago
I remember we practiced using Trivy to scan images, but I'm not entirely sure how to filter for just High or Critical vulnerabilities.
JU
Jutta
1 year ago
This question seems a bit tricky. I'll need to think through the wavelength and frequency relationship to figure this out.
MI
Micheline
1 year ago
Okay, I'm leaning towards the Azure Standard Load Balancer with outbound rules. That should give us more control over the SNAT connections and help resolve the issue with users accessing internet resources during peak hours.
RO
Roselle
1 year ago
I'm pretty sure the change management process starts in Phase 1, so I'll go with option B.
MI
Ming
1 year ago
This seems like a tricky one. I'll need to think through the different options carefully to make sure I pick the most effective approach.
VI
Vi
1 year ago
I wonder if Trivy can also scan my fridge for expired milk. Gotta stay on top of those critical vulnerabilities, you know?
LE
Leah
1 year ago
Yeah, but for now, let's focus on securing our containers.
LA
Lashawnda
1 year ago
Haha, that would be a cool feature though!
MA
Mammie
1 year ago
Trivy is for container scanning, not fridges.
GL
Glory
2 years ago
Wait, do I need to use 'kubectl config use-context scanner' first? I don't want to accidentally delete the wrong Pods. Better be careful here.
RO
Roxane
1 year ago
Once you switch the context to 'scanner', you can proceed with using Trivy to identify and remove Pods with critical vulnerabilities.
LI
Lindsey
1 year ago
Make sure you are in the right context to avoid any mistakes. Safety first!
HE
Helene
1 year ago
Yes, you should switch the cluster context to 'scanner' using 'kubectl config use-context scanner' before using Trivy to detect and delete Pods with severe vulnerabilities.
DI
Dino
2 years ago
This is a piece of cake! I bet the answer is as simple as 'kubectl delete pod ' for any vulnerable Pods. Easy-peasy!
TR
Truman
1 year ago
Exactly. It's important to follow the steps correctly to ensure we remove any potential security risks in the cluster.
RO
Roosevelt
1 year ago
Once we identify the images with High or Critical severity vulnerabilities, we can then delete the Pods that use those images.
PA
Pamella
1 year ago
You're right. We should use Trivy on the master node to find images with severe vulnerabilities in the namespace nato.
LU
Lucy
1 year ago
I think it's more than just 'kubectl delete pod '. We need to use Trivy to detect the vulnerable images first.
ED
Eden
1 year ago
Got it! I'll use Trivy to find the vulnerable images and then delete the Pods. Thanks for the tip!
RI
Rikki
1 year ago
Make sure to switch to the scanner context using 'kubectl config use-context scanner' before running Trivy on the master node.
WI
Willow
1 year ago
Yes, you're right! Once you identify the Pods with severe vulnerabilities, you can use 'kubectl delete pod ' to remove them.
ST
Stanford
2 years ago
Just remember to use Trivy to detect the vulnerable images first before deleting the Pods.
TR
Tracey
2 years ago
That makes sense. We should focus on images with High or Critical severity vulnerabilities in the namespace nato.
AH
Ahmed
2 years ago
Hmm, I wonder if I need to have specific permissions to use Trivy on the master node. I better double-check the documentation just to be sure.
JO
Jodi
1 year ago
You should be able to use Trivy on the master node without any special permissions.
FA
Fatima
2 years ago
Make sure to check the Trivy documentation for any permission requirements.
AD
Adolph
2 years ago
The question is clear and the task is straightforward. I should be able to use Trivy on the master node to scan the images in the 'nato' namespace and delete the vulnerable Pods.
RO
Rochell
1 year ago
After identifying the vulnerable images, I will delete the Pods that use those images.
MI
Micah
1 year ago
I will look for images with High or Critical severity vulnerabilities in the 'nato' namespace.
KI
King
1 year ago
I see that Trivy is pre-installed on the master node, so I will use that to scan for vulnerable images.
XO
Xochitl
2 years ago
I will switch the cluster context to 'scanner' using the command provided.
TA
Tamra
2 years ago
I think we need to carefully read the task and use the Trivy tool on the master node to find and delete Pods with critical vulnerabilities.
TR
Tracey
2 years ago
I'm nervous about the exam question on using Trivy to detect vulnerabilities.