MENU
Task
Analyze and edit the given Dockerfile /home/candidate/KSSC00301/Docker file (based on the ubuntu:16.04 image), fixing two instructions present in the file that are prominent security/best-practice issues.
Analyze and edit the given manifest file /home/candidate/KSSC00301/deployment.yaml, fixing two fields present in the file that are prominent security/best-practice issues.
Suggested Answer: A
Get Premium CKS Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
16 comments · newest first
FL
Flo
11 months ago
I disagree, sometimes older images are more stable for production.
PE
Pedro
11 months ago
Don't forget to set user permissions properly in the Dockerfile!
LA
Lamar
11 months ago
Wait, are we really still using Ubuntu 16.04? That's surprising!
JE
Jettie
11 months ago
Totally agree, outdated images can be a huge risk!
TO
Toshia
12 months ago
You should always use the latest base image for security.
TI
Timothy
12 months ago
I remember that specifying resource limits in the deployment.yaml is important for security, but I can't remember the exact syntax to use.
DE
Delsie
1 year ago
I believe we should avoid using `latest` tags in the Dockerfile, but I might be mixing that up with something else.
CO
Corinne
1 year ago
For the manifest file, I feel like I need to check the security context settings. I practiced a similar question, but I can't recall the exact fields to modify.
CH
Cheryl
1 year ago
I think I remember that using a specific user instead of root in the Dockerfile is a best practice, but I'm not sure how to implement it correctly.
MA
Marvel
1 year ago
Ah, a classic security-focused question. I've got a good handle on Docker and Kubernetes best practices, so I think I can tackle this one.
LO
Lorenza
1 year ago
This seems straightforward enough, but I want to make sure I don't miss anything. I'll need to really understand the context and potential risks.
CA
Carma
1 year ago
Alright, time to put my security knowledge to the test. I'll need to reference best practices and common vulnerabilities to tackle this question.
ST
Stefany
1 year ago
Okay, let's see what we've got here. The instructions mention fixing two issues in each file, so I'll need to be thorough in my analysis.
RO
Roy
1 year ago
Hmm, this looks like a tricky one. I'll need to carefully review the Dockerfile and deployment.yaml files to identify the security/best-practice issues.
YO
Yoko
1 year ago
This question seems straightforward. I think the key is to focus on the program closure process and what could prevent it from being completed.
VO
Vonda
1 year ago
I'm a little confused by all the different syntax options here. I think option B with the DELIMITER AS ',' might work, but I'm not 100% sure. I'll need to carefully read through the question and think it through step-by-step.