Linux Foundation Exam CKS Topic 1 Question 40 Discussion

Actual exam question for Linux Foundation's CKS exam

Question #: 40
Topic #: 1

[All CKS Questions]

Cluster:scanner Master node:controlplane Worker node:worker1

You can switch the cluster/configuration context using the following command:

[desk@cli] $kubectl config use-context scanner

Given: You may use Trivy's documentation.

Task: Use the Trivy open-source container scanner to detect images with severe vulnerabilities used by Pods in the namespacenato.

Look for images withHighorCriticalseverity vulnerabilities and delete the Pods that use those images. Trivy is pre-installed on the cluster's master node. Use cluster's master node to use Trivy.

AExplanation:

Show Suggested Answer

Suggested Answer: A

by Alease at Aug 10, 2023, 04:38 PM

Limited Time Offer

25%

Off

Get Premium CKS Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Vi

2 months ago

I wonder if Trivy can also scan my fridge for expired milk. Gotta stay on top of those critical vulnerabilities, you know?

upvoted 0 times

Leah

1 days ago

Yeah, but for now, let's focus on securing our containers.

upvoted 0 times

...

Lashawnda

12 days ago

Haha, that would be a cool feature though!

upvoted 0 times

...

Mammie

1 months ago

Trivy is for container scanning, not fridges.

upvoted 0 times

...

Glory

2 months ago

Wait, do I need to use 'kubectl config use-context scanner' first? I don't want to accidentally delete the wrong Pods. Better be careful here.

upvoted 0 times

Roxane

25 days ago

Once you switch the context to 'scanner', you can proceed with using Trivy to identify and remove Pods with critical vulnerabilities.

upvoted 0 times

...

Lindsey

2 months ago

Make sure you are in the right context to avoid any mistakes. Safety first!

upvoted 0 times

...

Helene

2 months ago

Yes, you should switch the cluster context to 'scanner' using 'kubectl config use-context scanner' before using Trivy to detect and delete Pods with severe vulnerabilities.

upvoted 0 times

...

Dino

2 months ago

This is a piece of cake! I bet the answer is as simple as 'kubectl delete pod ' for any vulnerable Pods. Easy-peasy!

upvoted 0 times

Truman

6 days ago

Exactly. It's important to follow the steps correctly to ensure we remove any potential security risks in the cluster.

upvoted 0 times

...

Roosevelt

7 days ago

Once we identify the images with High or Critical severity vulnerabilities, we can then delete the Pods that use those images.

upvoted 0 times

...

Pamella

9 days ago

You're right. We should use Trivy on the master node to find images with severe vulnerabilities in the namespace nato.

upvoted 0 times

...

Lucy

12 days ago

I think it's more than just 'kubectl delete pod '. We need to use Trivy to detect the vulnerable images first.

upvoted 0 times

...

Eden

13 days ago

Got it! I'll use Trivy to find the vulnerable images and then delete the Pods. Thanks for the tip!

upvoted 0 times

...

Rikki

15 days ago

Make sure to switch to the scanner context using 'kubectl config use-context scanner' before running Trivy on the master node.

upvoted 0 times

...

Willow

1 months ago

Yes, you're right! Once you identify the Pods with severe vulnerabilities, you can use 'kubectl delete pod ' to remove them.

upvoted 0 times

...

Stanford

2 months ago

Just remember to use Trivy to detect the vulnerable images first before deleting the Pods.

upvoted 0 times

...

Tracey

3 months ago

That makes sense. We should focus on images with High or Critical severity vulnerabilities in the namespace nato.

upvoted 0 times

...

Ahmed

3 months ago

Hmm, I wonder if I need to have specific permissions to use Trivy on the master node. I better double-check the documentation just to be sure.

upvoted 0 times

Jodi

2 months ago

You should be able to use Trivy on the master node without any special permissions.

upvoted 0 times

...

Fatima

2 months ago

Make sure to check the Trivy documentation for any permission requirements.

upvoted 0 times

...

Adolph

3 months ago

The question is clear and the task is straightforward. I should be able to use Trivy on the master node to scan the images in the 'nato' namespace and delete the vulnerable Pods.

upvoted 0 times