When reviewing the Image Assessment report in CrowdStrike, which of the following indicates a misconfiguration in the Dockerfile that could lead to security risks?

Question

Options

• ARunning the container as the root user
• BUsing a base image tagged as "latest"
• CNot specifying a WORKDIR in the Dockerfile
• DExcluding metadata labels in the Dockerfile

• A
  94% (44)
• B
  4% (2)
• D
  2% (1)

Explanation

Option A: Running a container as the root user is a critical misconfiguration because it increases the risk of privilege escalation if the container is compromised. An attacker could potentially gain elevated permissions on the host system if the container escapes isolation. Option B: While using the "latest" tag can lead to unpredictable builds and dependency issues, it is not directly a security risk. However, it may make it harder to identify the exact image version, which could complicate vulnerability tracking. Option C: While specifying a WORKDIR is a best practice for clarity and predictability, its absence does not inherently introduce security risks. The default working directory is the root directory of the container filesystem. Option D: Metadata labels provide descriptive information about the image, such as the maintainer's contact. Their absence is not a security risk but rather a loss of best practices for

No community discussion yet for this question.