You are tasked with reviewing the installed packages in a container image to ensure compliance with security policies. Which of the following best describes a secure and efficient approach to this…

Question

Options

• AUsing the apt-get list command inside the container to manually check package versions.
• BUsing a container security scanning tool to generate a software bill of materials (SBOM).
• CCreating a custom script to compare installed packages with known vulnerabilities.
• DManually reviewing the base image layers using a text editor.

• A
  4% (2)
• B
  76% (42)
• C
  5% (3)
• D
  15% (8)

Explanation

Option A: This is a manual and error-prone process that does not scale well for complex images. It also fails to cross-reference vulnerabilities in real-time. Option B: An SBOM provides a detailed inventory of all installed packages and dependencies in a container image. Container security scanning tools can automatically generate this information and cross-reference it with vulnerability databases, ensuring efficient and accurate reviews. Option C: While technically possible, this approach is inefficient and unnecessary when purpose- built tools exist. Writing and maintaining such a script is time-intensive and error-prone. Option D: This is an impractical and incomplete approach. Vulnerabilities cannot be reliably identified by manually inspecting files without the context of vulnerability databases or automated

No community discussion yet for this question.