CompTIA
CAS-005 · Question #21
A security engineer wants to reduce the attack surface of a public-facing containerized application. Which of the following will best reduce the application's privilege escalation attack surface?
Sign in or unlock CAS-005 to reveal the answer and full explanation for question #21. The question stem and answer options stay visible for context.
Submitted by renata2k· Mar 6, 2026Security Engineering
Question
A security engineer wants to reduce the attack surface of a public-facing containerized application. Which of the following will best reduce the application's privilege escalation attack surface?
Options
- AImplementing the following commands in the Dockerfile:
- BInstalling an EDR on the container's host, with reporting configured to log to a centralized SIEM,
- CDesigning a muiticontainer solution, with one set of containers that runs the mam application, and
- DRunning the container in an isolated network and placing a load balancer in a public-facing
Unlock CAS-005 to see the answer
You've previewed enough free CAS-005 questions. Unlock CAS-005 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.