Why are containers uniquely suitable for runtime security based on allow lists?

The correct answer is A. Containers have only a few defined processes that should ever be executed.. Containers are uniquely suitable for runtime security based on allow lists because containers have only a few defined processes that should ever be executed. Developers can specify the processes that are allowed to run in a container using a Dockerfile, but this does not guarante

Operate

Question

Options

AContainers have only a few defined processes that should ever be executed.
BDevelopers define the processes used in containers within the Dockerfile.
CDocker has a built-in runtime analysis capability to aid in allow listing.
DOperations teams know which processes are used within a container.

How the community answered

(39 responses)

A
77% (30)
B
8% (3)
C
13% (5)
D
3% (1)

Explanation

Containers are uniquely suitable for runtime security based on allow lists because containers have only a few defined processes that should ever be executed. Developers can specify the processes that are allowed to run in a container using a Dockerfile, but this does not guarantee that only those processes will run at runtime. Therefore, using an allow list approach can prevent any unauthorized or malicious processes from running in a container.

Topics

#container security#allow-list model#runtime security#process isolation

Community Discussion

No community discussion yet for this question.

Full PCSFE Practice