Which of the following is a potential security issue that would be flagged in an Image Assessment report?

Question

Options

• AA Docker file that does not specify a base image.
• BPresence of unused code in the container image.
• CThe use of a root user in the Docker file.
• DPresence of low-severity CVEs in non-critical components.

• B
  4% (1)
• C
  93% (26)
• D
  4% (1)

Explanation

Option A: While specifying a base image is a best practice for reproducibility and version control, its absence does not pose an immediate security risk and would not be flagged as a security Option B: While unused code can increase image size and complicate security reviews, it is not inherently a security vulnerability unless the code includes exploitable components. This issue would not be flagged directly by the Image Assessment report. Option C: Using a root user in a Docker file is a common misconfiguration that increases the attack surface of a container. This issue would be flagged in the Image Assessment report to encourage the use of a non-root user for better security practices. Option D: The Image Assessment report prioritizes high-severity CVEs that pose significant risks. Low-severity CVEs are typically not flagged unless they are linked to critical functionalities or chained vulnerabilities.

No community discussion yet for this question.