Linux Foundation CKS Exam - Topic 1 Question 45 Discussion

Actual exam question for Linux Foundation's CKS exam

Question #: 45
Topic #: 1

Task

Analyze and edit the given Dockerfile /home/candidate/KSSC00301/Docker file (based on the ubuntu:16.04 image), fixing two instructions present in the file that are prominent security/best-practice issues.

Analyze and edit the given manifest file /home/candidate/KSSC00301/deployment.yaml, fixing two fields present in the file that are prominent security/best-practice issues.

AExplanation:

Show Suggested Answer

Suggested Answer: A

by Tasia at Dec 13, 2023, 06:29 PM

Limited Time Offer

25%

Off

Get Premium CKS Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Flo

9 months ago

I disagree, sometimes older images are more stable for production.

upvoted 0 times

...

Pedro

9 months ago

Don't forget to set user permissions properly in the Dockerfile!

upvoted 0 times

...

Lamar

9 months ago

Wait, are we really still using Ubuntu 16.04? That's surprising!

upvoted 0 times

...

Jettie

9 months ago

Totally agree, outdated images can be a huge risk!

upvoted 0 times

...

Toshia

10 months ago

You should always use the latest base image for security.

upvoted 0 times

...

Timothy

10 months ago

I remember that specifying resource limits in the deployment.yaml is important for security, but I can't remember the exact syntax to use.

upvoted 0 times

...

Delsie

10 months ago

I believe we should avoid using `latest` tags in the Dockerfile, but I might be mixing that up with something else.

upvoted 0 times

...

Corinne

10 months ago

For the manifest file, I feel like I need to check the security context settings. I practiced a similar question, but I can't recall the exact fields to modify.

upvoted 0 times

...

Cheryl

10 months ago

I think I remember that using a specific user instead of root in the Dockerfile is a best practice, but I'm not sure how to implement it correctly.

upvoted 0 times

...

Marvel

10 months ago

Ah, a classic security-focused question. I've got a good handle on Docker and Kubernetes best practices, so I think I can tackle this one.

upvoted 0 times

...

Lorenza

10 months ago

This seems straightforward enough, but I want to make sure I don't miss anything. I'll need to really understand the context and potential risks.

upvoted 0 times

...

Carma

10 months ago

Alright, time to put my security knowledge to the test. I'll need to reference best practices and common vulnerabilities to tackle this question.

upvoted 0 times

...

Stefany

10 months ago

Okay, let's see what we've got here. The instructions mention fixing two issues in each file, so I'll need to be thorough in my analysis.

upvoted 0 times

...

Roy

10 months ago

Hmm, this looks like a tricky one. I'll need to carefully review the Dockerfile and deployment.yaml files to identify the security/best-practice issues.

upvoted 0 times

...

Yoko

11 months ago

This question seems straightforward. I think the key is to focus on the program closure process and what could prevent it from being completed.

upvoted 0 times

...

Vonda

11 months ago

I'm a little confused by all the different syntax options here. I think option B with the DELIMITER AS ',' might work, but I'm not 100% sure. I'll need to carefully read through the question and think it through step-by-step.

upvoted 0 times

...