nerdexam
Cisco

200-901 · Question #91

What are two security benefits of a Docker-based application?

The correct answer is A. easier to patch because Docker containers include only dependencies that the application C. allows for separation of application that traditionally run in the same host. Docker containers improve security by reducing the attack surface through minimal dependencies and by isolating applications that would otherwise share a host.

Application Deployment and Security

Question

What are two security benefits of a Docker-based application?

Options

  • Aeasier to patch because Docker containers include only dependencies that the application
  • Bprevents information leakage that can occur when unhandled exceptions are returned in HTTP
  • Callows for separation of application that traditionally run in the same host
  • Dnatively secures access to secrets that are used by the running application
  • Eguarantees container images are secured and free of vulnerabilities Answer:

How the community answered

(33 responses)
  • A
    94% (31)
  • B
    3% (1)
  • E
    3% (1)

Why each option

Docker containers improve security by reducing the attack surface through minimal dependencies and by isolating applications that would otherwise share a host.

Aeasier to patch because Docker containers include only dependencies that the applicationCorrect

Docker containers package only the specific libraries and dependencies an application requires, minimizing the number of components that need patching and limiting exposure to vulnerabilities present in unused packages.

Bprevents information leakage that can occur when unhandled exceptions are returned in HTTP

Suppressing unhandled HTTP exceptions is an application-level coding practice, not a feature provided by the Docker runtime or container model.

Callows for separation of application that traditionally run in the same hostCorrect

Containers use Linux namespaces and cgroups to provide OS-level isolation, allowing applications that previously co-existed on one host to be separated, reducing the blast radius if one application is compromised.

Dnatively secures access to secrets that are used by the running application

Docker does not natively secure secrets - external mechanisms such as Docker Swarm Secrets or HashiCorp Vault are required to safely manage application secrets.

Eguarantees container images are secured and free of vulnerabilities Answer:

Docker does not guarantee images are vulnerability-free - images must be independently scanned using dedicated tools such as Trivy, Snyk, or Docker Scout.

Concept tested: Docker container security isolation and dependency management

Source: https://docs.docker.com/engine/security/

Topics

#Docker Security#Containerization Benefits#Application Isolation#Attack Surface Reduction

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 200-901 Practice