nerdexam
Linux_FoundationLinux_Foundation

CKS · Question #66

CKS Question #66: Real Exam Question with Answer & Explanation

Sign in or unlock CKS to reveal the answer and full explanation for question #66. The question stem and answer options stay visible for context.

Submitted by fernanda_arg· May 4, 2026Minimize Microservice Vulnerabilities

Question

Question: 52 SIMULATION You must connect to the correct host. Failure to do so may result in a zero score. Analyze and edit the Dockerfile located at /home/candidate/subtle-bee/build/Dockerfile, fixing one instruction present in the file that is a prominent security/best-practice issue. Do not add or remove instructions; only modify the one existing instruction with a security/best-practice concern. Do not build the Dockerfile, Failure to do so may result in running out of storage and a zero score. Analyze and edit the given manifest file /home/candidate/subtle-bee/deployment.yaml, fixing one fields present in the file that is a prominent security/best-practice issue. Do not add or remove fields; only modify the one existing field with a security/best-practice concern. Should you need an unprivileged user for any of the tasks, use user nobody with user ID 65535.

Unlock CKS to see the answer

You've previewed enough free CKS questions. Unlock CKS for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#Dockerfile Security#Kubernetes Manifest Security#Least Privilege#Container Hardening
Full CKS PracticeBrowse All CKS Questions