Container Security for AI Workloads Quiz

1. Which of the following represents a security risk in AI container deployments?

Running containers with privileged mode

Using read-only filesystems

Implementing network policies

Scanning images regularly

2. What is the role of role-based access control (RBAC) in securing containerized AI workloads?

Define fine-grained permissions for accessing container resources and APIs

Automatically scale containers

Monitor container logs

Manage container networking

3. True or False: Container vulnerability scanning should only occur during initial deployment.

True

False

4. Which of the following is a security best practice for managing AI model weights in containers?

Store weights in encrypted volumes and control read access

Keep weights in plain text for faster loading

Store weights in public registries

Embed weights directly in Dockerfiles

5. What is the primary benefit of using seccomp profiles in container security?

Restrict system calls available to container processes

Encrypt container data

Manage container storage

Allocate network bandwidth

6. True or False: Network policies in Kubernetes can restrict traffic between AI model containers and unauthorized services.

True

False

7. Which practice helps prevent container escape attacks?

Keeping host kernel and container runtime updated

Using older container runtime versions

Disabling security features

Running all containers as root

8. What is the purpose of security scanning in the container CI/CD pipeline?

Detect vulnerabilities before images are pushed to production

Increase container build speed

Reduce container file size

Manage container versioning

9. True or False: Multi-stage Docker builds can reduce security risks by excluding development tools from final images.

True

False

10. What does container isolation primarily protect against?

Lateral movement and unauthorized access between containers

Network latency

Storage bottlenecks

Image download failures

11. What is the primary purpose of image scanning in container security?

Identify known vulnerabilities and malware in container images

Monitor container runtime performance

Encrypt container storage

Manage user access permissions

12. What is the purpose of admission controllers in Kubernetes container security?

Enforce security policies before containers are deployed

Monitor container CPU usage

Manage container networking

Scale container replicas

13. True or False: Secrets such as API keys should be stored in container environment variables at build time.

True

False

14. Which security practice involves signing container images?

Image signing verifies the publisher and ensures image integrity

It encrypts the container filesystem

It allocates compute resources

It manages container networking

15. What is the purpose of using a private container registry for AI workloads?

Control access to proprietary models and ensure image integrity

Improve container download speed

Reduce storage requirements

Eliminate the need for image signing

16. True or False: Container images should include all available system packages to ensure compatibility.

True

False

17. What is a container runtime security policy used for?

Controlling which processes can run inside containers

Scheduling container deployment

Managing container image registries

Allocating CPU resources

18. Which tool is commonly used for scanning container images for vulnerabilities?

Trivy

Docker Compose

Kubernetes Scheduler

Prometheus

19. What does the principle of least privilege mean in container security?

Grant containers only the minimum permissions needed to function

Allow all containers full system access

Limit the number of containers per host

Restrict container memory allocation

20. Which of the following is a best practice for securing AI model containers?

Run containers with root privileges for unrestricted access

Use immutable base images and minimize layers

Store credentials directly in Dockerfile

Disable all network policies

SecAI+ Container Security for AI Workloads Quiz

1. Which of the following represents a security risk in AI container deployments?

2.

What first name or nickname would you like us to use?

2. What is the role of role-based access control (RBAC) in securing containerized AI workloads?

3. True or False: Container vulnerability scanning should only occur during initial deployment.

4. Which of the following is a security best practice for managing AI model weights in containers?

5. What is the primary benefit of using seccomp profiles in container security?

6. True or False: Network policies in Kubernetes can restrict traffic between AI model containers and unauthorized services.

7. Which practice helps prevent container escape attacks?

8. What is the purpose of security scanning in the container CI/CD pipeline?

9. True or False: Multi-stage Docker builds can reduce security risks by excluding development tools from final images.

10. What does container isolation primarily protect against?

11. What is the primary purpose of image scanning in container security?

12. What is the purpose of admission controllers in Kubernetes container security?

13. True or False: Secrets such as API keys should be stored in container environment variables at build time.

14. Which security practice involves signing container images?

15. What is the purpose of using a private container registry for AI workloads?

16. True or False: Container images should include all available system packages to ensure compatibility.

17. What is a container runtime security policy used for?

18. Which tool is commonly used for scanning container images for vulnerabilities?

19. What does the principle of least privilege mean in container security?

20. Which of the following is a best practice for securing AI model containers?