While auditing a cloud image configured for deployment, which of the following findings represents a deployment misconfiguration?

Question

Options

• AThe image lacks a health check directive in the Dockerfile.
• BThe image uses a private container registry with role-based access control (RBAC).
• CThe image has labels for versioning and maintainability metadata.
• DThe image includes unused software packages.

• A
  3% (1)
• B
  16% (5)
• C
  9% (3)
• D
  72% (23)

Explanation

Option A: While missing a health check directive is not ideal for production readiness, it is not a security misconfiguration. Health checks are primarily for operational monitoring and ensuring high availability. Option B: This is a best practice to ensure only authorized users can access the image. It strengthens the security of the deployment pipeline and does not represent a misconfiguration. Option C: Adding labels for versioning and maintainability metadata (e.g., LABEL version="1.0") is a best practice. It aids in managing image lifecycles and troubleshooting deployments. This does not constitute a misconfiguration. Option D: Including unused software packages increases the attack surface and may introduce unnecessary vulnerabilities. Attackers could exploit unmaintained or outdated components, even if they are not actively used by the application. Removing unnecessary packages during the build process is a key security best practice.

No community discussion yet for this question.