Linux Foundation Exam CKS Topic 1 Question 51 Discussion

Actual exam question for Linux Foundation's Certified Kubernetes Security Specialist exam

Question #: 51
Topic #: 1

[All Certified Kubernetes Security Specialist Questions]

Task

Analyze and edit the given Dockerfile /home/candidate/KSSC00301/Docker file (based on the ubuntu:16.04 image), fixing two instructions present in the file that are prominent security/best-practice issues.

Analyze and edit the given manifest file /home/candidate/KSSC00301/deployment.yaml, fixing two fields present in the file that are prominent security/best-practice issues.

AExplanation:

Show Suggested Answer

Suggested Answer: A

by Jenelle at Apr 11, 2024, 09:20 AM

Limited Time Offer

25%

Off

Get Premium CKS Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Cristen

7 days ago

Definitely. I'm glad they're testing us on this stuff - it's crucial for anyone working with containers and Kubernetes. I'm ready to dive in and see what we can find. Anyone else want to take a crack at it?

upvoted 0 times

...

Carmen

9 days ago

Haha, 'juicy issues' - I like that! But you're absolutely right, we need to be really thorough in reviewing both the Dockerfile and the deployment YAML. Security and best practices are so important, especially for a certification exam.

upvoted 0 times

...

Mary

10 days ago

Good point about the base image. That's definitely a security concern, especially for a production deployment. And let's not forget about the deployment YAML file. I bet there are some juicy issues there too, like hardcoded credentials or exposing sensitive information.

upvoted 0 times

...

Talia

11 days ago

I agree, the Dockerfile is a good place to start. Maybe we're running processes as root or installing unnecessary packages. Oh, and we should definitely be using a more recent base image than Ubuntu 16.04.

upvoted 0 times

...

Trinidad

13 days ago

Alright, let's get started. First, I'll take a look at the Dockerfile. Hmm, I wonder what those prominent security/best-practice issues could be. I bet it has something to do with the base image or the packages we're installing.

upvoted 0 times

...

Arthur

15 days ago

This is a great question! I'm excited to dig into the Dockerfile and deployment YAML and see what security/best-practice issues we can identify and fix.

upvoted 0 times

...