Linux Foundation CKS Exam - Topic 3 Question 73 Discussion

Actual exam question for Linux Foundation's CKS exam

Question #: 73
Topic #: 3

Context

A container image scanner is set up on the cluster, but it's not yet fully integrated into the cluster s configuration. When complete, the container image scanner shall scan for and reject the use of vulnerable images.

Task

Given an incomplete configuration in directory /etc/kubernetes/epconfig and a functional container image scanner with HTTPS endpoint https://wakanda.local:8081 /image_policy :

1. Enable the necessary plugins to create an image policy

2. Validate the control configuration and change it to an implicit deny

3. Edit the configuration to point to the provided HTTPS endpoint correctly

Finally, test if the configuration is working by trying to deploy the vulnerable resource /root/KSSC00202/vulnerable-resource.yml.

AExplanation:

Show Suggested Answer

Suggested Answer: A

by Adelina at Jan 28, 2025, 08:26 AM

Limited Time Offer

25%

Off

Get Premium CKS Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Sanjuana

7 months ago

I thought vulnerable images were already blocked by default?

upvoted 0 times

...

Emily

7 months ago

Implicit deny is a must for security!

upvoted 0 times

...

Ernie

7 months ago

Wait, is the scanner even configured properly yet?

upvoted 0 times

...

Becky

7 months ago

Totally agree, can't skip that step.

upvoted 0 times

...

Audry

8 months ago

Make sure to enable the right plugins for the image policy!

upvoted 0 times

...

Melinda

8 months ago

I feel like testing the deployment of the vulnerable resource will be crucial to see if everything is set up correctly. I hope I remember the right command to use!

upvoted 0 times

...

Tesha

8 months ago

I’m a bit confused about editing the configuration to point to the HTTPS endpoint. Is it just a matter of changing the URL in the config file?

upvoted 0 times

...

Aleisha

8 months ago

I think we practiced something similar where we had to set an implicit deny. It’s about making sure no vulnerable images are allowed, right?

upvoted 0 times

...

Loreta

8 months ago

I remember we discussed enabling plugins for image policies, but I’m not entirely sure which ones are necessary.

upvoted 0 times

...

Christoper

8 months ago

I've worked with image scanning and policy enforcement before, so I think I've got a good handle on this. The key will be making sure I enable the right plugins and configure the HTTPS endpoint correctly. Shouldn't be too much of a challenge.

upvoted 0 times

...

Jutta

8 months ago

This seems like a tricky one. I'm not super familiar with image scanning and policy configuration, so I'll need to take my time and really understand each step before attempting to implement the solution.

upvoted 0 times

...

Shanda

8 months ago

Okay, let's break this down step-by-step. First, I'll need to enable the necessary plugins, then set the policy to implicit deny, and finally update the config to point to the HTTPS endpoint. Shouldn't be too difficult, just need to be careful with the details.

upvoted 0 times

...

Margot

8 months ago

Hmm, I'm a bit unsure about the specific steps here. I'll need to review the documentation on image policies and make sure I understand how to properly configure everything.

upvoted 0 times

...

Leslee

9 months ago

This looks like a pretty straightforward configuration task. I think I can handle it - just need to enable the right plugins, set the policy to implicit deny, and point to the HTTPS endpoint correctly.

upvoted 0 times

...

Yuriko

1 year ago

Hmm, 'wakanda.local' huh? I bet T'Challa is the one monitoring these scans. Better not mess this up!

upvoted 0 times

...

Edda

1 year ago

Wait, we have to configure an image scanner? That's like adding an extra layer of security. I'm starting to feel like a cybersecurity superhero already!

upvoted 0 times

Mable

1 year ago

Once the configuration is complete, the image scanner will help prevent the use of vulnerable images.

upvoted 0 times

...

Selma

1 year ago

I agree, it's like being a cybersecurity superhero protecting the cluster from vulnerabilities.

upvoted 0 times

...

Shawana

1 year ago

It's an important step to ensure that only secure container images are used.

upvoted 0 times

...

Amie

1 year ago

Yes, configuring an image scanner adds an extra layer of security to the cluster.

upvoted 0 times

...

Annmarie

1 year ago

Finally, a question that doesn't involve memorizing a gazillion Kubernetes commands. This one's got my name written all over it!

upvoted 0 times

Wilda

1 year ago

Let's make sure we follow the steps correctly to enable the necessary plugins and validate the control configuration.

upvoted 0 times

...

Fernanda

1 year ago

I'm excited to set up the container image scanner and test the configuration.

upvoted 0 times

...

Kara

1 year ago

I know, right? This question seems more practical and hands-on.

upvoted 0 times

...

Jutta

1 year ago

Ah, I see we need to enable the necessary plugins and set up the HTTPS endpoint. Looks like a solid challenge to test my Kubernetes skills.

upvoted 0 times

Leonora

1 year ago

I agree, setting up the container image scanner properly is crucial.

upvoted 0 times

...

Dorthy

1 year ago

Yes, it's definitely a good challenge to test our skills.

upvoted 0 times

...

Cyril

1 year ago

I believe enabling the necessary plugins and configuring the HTTPS endpoint are key steps to achieve this.

upvoted 0 times

...

Marisha

1 year ago

I agree, we need to ensure that only secure images are used in the cluster.

upvoted 0 times

...

Latricia

1 year ago

Hmm, this seems like a tricky one. I better double-check the configuration steps to get this right.

upvoted 0 times

Gerald

1 year ago

User 4: Once that's done, we can test if the configuration is working by deploying the vulnerable resource.

upvoted 0 times

...

Fernanda

1 year ago

User 3: Don't forget to edit the configuration to point to the provided HTTPS endpoint correctly.

upvoted 0 times

...

Blair

1 year ago

User 2: Yes, that's the first step. We also need to validate the control configuration and change it to an implicit deny.

upvoted 0 times

...

Rodrigo

1 year ago

User 1: I think we need to enable the necessary plugins to create an image policy.

upvoted 0 times

...

Loise

1 year ago

I think setting up the container image scanner is crucial for security.

upvoted 0 times

...