nerdexam
CrowdStrike

CCCS-203B · Question #42

Which of the following is a potential security issue that would be flagged in an Image Assessment report?

The correct answer is C. The use of a root user in the Docker file.. Option A: While specifying a base image is a best practice for reproducibility and version control, its absence does not pose an immediate security risk and would not be flagged as a security Option B: While unused code can increase image size and complicate security reviews, it

Image Assessment and Registry Security

Question

Which of the following is a potential security issue that would be flagged in an Image Assessment report?

Options

  • AA Docker file that does not specify a base image.
  • BPresence of unused code in the container image.
  • CThe use of a root user in the Docker file.
  • DPresence of low-severity CVEs in non-critical components.

How the community answered

(28 responses)
  • B
    4% (1)
  • C
    93% (26)
  • D
    4% (1)

Explanation

Option A: While specifying a base image is a best practice for reproducibility and version control, its absence does not pose an immediate security risk and would not be flagged as a security Option B: While unused code can increase image size and complicate security reviews, it is not inherently a security vulnerability unless the code includes exploitable components. This issue would not be flagged directly by the Image Assessment report. Option C: Using a root user in a Docker file is a common misconfiguration that increases the attack surface of a container. This issue would be flagged in the Image Assessment report to encourage the use of a non-root user for better security practices. Option D: The Image Assessment report prioritizes high-severity CVEs that pose significant risks. Low-severity CVEs are typically not flagged unless they are linked to critical functionalities or chained vulnerabilities.

Topics

#Dockerfile security#root user#image assessment#container hardening

Community Discussion

No community discussion yet for this question.

Full CCCS-203B Practice