During a container security audit, a security team finds that multiple Kubernetes pods are publicly accessible from the internet due to a misconfigured ingress rule. Which of the following actions sho

Question

Options

• AModify the Kubernetes Ingress and NetworkPolicy rules to restrict public access only to necessary
• BChange the container runtime from Docker to containerd to improve security and reduce exposure
• CShut down all affected pods immediately to prevent unauthorized access.
• DDisable all public-facing networking in the cloud provider settings, blocking all traffic to the cluster.

• A
  80% (47)
• B
  7% (4)
• C
  10% (6)
• D
  3% (2)

Explanation

Option A: Misconfigured Kubernetes ingress rules can expose sensitive services to the internet. The correct action is to update Ingress and NetworkPolicy rules to limit access to only trusted sources and necessary endpoints, reducing exposure while maintaining functionality. Option B: Changing the container runtime (e.g., Docker to containerd) can have security benefits, but it does not resolve misconfigured network exposure. Option C: Shutting down pods immediately may prevent unauthorized access but could also cause operational disruptions. The correct approach is to first secure network access before considering pod restarts. Option D: Disabling all public-facing networking is an extreme action that may impact legitimate services. The issue should be addressed through precise network policy adjustments rather than blanket restrictions.

No community discussion yet for this question.