Container Security & Privilege Management Quiz

1. True or False: Container images should be scanned for vulnerabilities only during the initial build phase.

True

False

2. True or False: Container logs should be aggregated and monitored for suspicious activity to detect security breaches.

True

False

3. What is the primary function of a Pod Security Policy in Kubernetes?

To manage network traffic between pods

To enforce security standards for pod creation and execution

To allocate storage volumes to containers

To configure container image registries

Submit

5. Which practice reduces the attack surface of a container image?

Including all development tools in the final image

Using multi-stage builds to remove unnecessary layers

Running multiple services in a single container

Disabling all security scanning tools

6. True or False: Secrets in Kubernetes are encrypted by default when stored in etcd.

True

False

Submit

8. What is the primary risk of using base images with unknown or unverified sources?

Increased network latency

Embedded malware or unpatched vulnerabilities

Loss of container orchestration features

Incompatibility with cloud providers

9. Which of the following best prevents lateral movement between containers in a cluster?

Using container image signing

Implementing network segmentation and NetworkPolicies

Running containers in privileged mode

Disabling container logging

Submit

11. Which of the following best describes the principle of least privilege in container environments?

Running containers with root access to simplify management

Granting only the minimum permissions necessary for a container to function

Allowing all users equal access to container resources

Restricting all network traffic to containers

12. Which Kubernetes resource defines permissions for accessing API resources?

NetworkPolicy

PodSecurityPolicy

ClusterRole and ClusterRoleBinding

ServiceAccount

13. What is the primary benefit of using a private container registry instead of a public one?

Faster image downloads globally

Control over access, image integrity, and vulnerability scanning

Reduced storage costs for image layers

Automatic patching of all vulnerabilities

Submit

15. Which of the following is a common privilege escalation vulnerability in containers?

Running processes as non-root users

Shared kernel exploits that allow container escape

Using read-only filesystems

Implementing network policies

16. True or False: Running containers with the --privileged flag is recommended for production environments.

True

False

17. What does RBAC stand for in the context of Kubernetes security?

Registry-Based Access Control

Role-Based Access Control

Runtime-Based Audit Control

Resource-Based Access Configuration

Submit

19. Which container runtime security tool monitors system calls and prevents unauthorized kernel access?

AppArmor and SELinux

Docker Compose

Kubernetes Ingress

Container Registry

20. What is the primary purpose of container image scanning in a security pipeline?

To verify the digital signature of the registry

To detect vulnerabilities and malware in image layers before deployment

To compress image files for faster downloads

To encrypt sensitive data stored in containers

Cloud+ Container Security and Privilege Management Quiz

1. True or False: Container images should be scanned for vulnerabilities only during the initial build phase.

2.

What first name or nickname would you like us to use?

2. True or False: Container logs should be aggregated and monitored for suspicious activity to detect security breaches.

3. What is the primary function of a Pod Security Policy in Kubernetes?

4. A container ______ defines the maximum system resources a container can consume, preventing resource exhaustion attacks.

5. Which practice reduces the attack surface of a container image?

6. True or False: Secrets in Kubernetes are encrypted by default when stored in etcd.

7. In Kubernetes, a ______ allows you to enforce which container images can be deployed based on registry and signature verification.

8. What is the primary risk of using base images with unknown or unverified sources?

9. Which of the following best prevents lateral movement between containers in a cluster?

10. A ______ is a set of Linux kernel features that limit container capabilities and prevent privilege escalation.

11. Which of the following best describes the principle of least privilege in container environments?

12. Which Kubernetes resource defines permissions for accessing API resources?

13. What is the primary benefit of using a private container registry instead of a public one?

14. A container security policy that prevents writing to the root filesystem is called a ______ filesystem.

15. Which of the following is a common privilege escalation vulnerability in containers?

16. True or False: Running containers with the --privileged flag is recommended for production environments.

17. What does RBAC stand for in the context of Kubernetes security?

18. A ______ is a mandatory access control mechanism that restricts processes based on security labels.

19. Which container runtime security tool monitors system calls and prevents unauthorized kernel access?

20. What is the primary purpose of container image scanning in a security pipeline?