A developer must ensure maximum security during the software development lifecycle. While investigating, the engineer discovers a potentially vulnerable Docker container. Which two methods must be app

Running containers as a root user is a significant security risk, as it grants elevated privileges that could be exploited by an attacker to gain control over the host system.

Securing container registries is critical because compromised registries can lead to the deployment of malicious or vulnerable images; using secure, authenticated registries prevents unauthorized image tampering and ensures image integrity.

Restarting a container to clear temporary files is general hygiene but not a direct method applied to the Dockerfile to maximize security against potential vulnerabilities.

Running containers as a non-root user is a fundamental security best practice, as it prevents potential privilege escalation to the host system if a malicious actor gains control of the container.

Adding a bulk data entry is an application-specific action related to data population and has no direct relevance to securing a Docker container or Dockerfile configuration.