What is the primary reason for reviewing the base image of a container when performing a security assessment?

Question

Options

• AThe base image configuration ensures proper runtime performance.
• BBase images must always include minimal layers to optimize storage.
• CThe base image often contains outdated dependencies that may introduce vulnerabilities.
• DReviewing the base image guarantees compatibility with orchestrators like Kubernetes.

• A
  5% (2)
• B
  3% (1)
• C
  89% (33)
• D
  3% (1)

Explanation

Option A: While runtime performance can be influenced by the image configuration, the primary focus of a security assessment is identifying and mitigating vulnerabilities, not performance Option B: Although using minimal layers can improve storage efficiency, the goal of reviewing base images is to ensure security, not necessarily to reduce the image size. Option C: The base image forms the foundation of a container. If it contains outdated or vulnerable dependencies, they can propagate to any containers built from it. Regularly reviewing and updating the base image ensures that known vulnerabilities are mitigated, which is critical for maintaining a secure environment. Option D: Compatibility with orchestrators like Kubernetes is generally determined by the image's runtime requirements, not by reviewing the base image for security.

No community discussion yet for this question.