A company is using Docker-based containerized applications in a multi-cloud deployment. The security team wants to evaluate Docker configuration settings and ensure that they meet industry security…

Question

Options

• AUse the --disable-content-trust=false flag when pulling container images
• BDisable root user access and enforce least privilege permissions
• CStore Docker secrets in environment variables for easy retrieval
• DAllow containers to run with privileged mode for performance optimization

• A
  5% (2)
• B
  78% (32)
• C
  5% (2)
• D
  12% (5)

Explanation

Option A: Content trust ensures that images come from verified sources, and the flag should be set to true rather than false. Using --disable-content-trust=false means that unverified, potentially malicious images could be pulled. Option B: The CIS Docker Benchmark recommends running containers as non-root users and enforcing least privilege access to reduce attack surface. Running containers with root privileges can lead to security vulnerabilities and compliance violations. Option C: Storing sensitive information in environment variables is a security risk because they can be accessed by any process running in the container. Instead, secrets should be stored in secure vaults or Kubernetes Secrets. Option D: Privileged mode grants containers full access to the host system, significantly increasing security risks. This violates industry best practices and should only be used in highly controlled environments.

No community discussion yet for this question.