Linux Foundation Exam CKS Topic 1 Question 51 Discussion

Actual exam question for Linux Foundation's CKS exam

Question #: 51
Topic #: 1

Task

Analyze and edit the given Dockerfile /home/candidate/KSSC00301/Docker file (based on the ubuntu:16.04 image), fixing two instructions present in the file that are prominent security/best-practice issues.

Analyze and edit the given manifest file /home/candidate/KSSC00301/deployment.yaml, fixing two fields present in the file that are prominent security/best-practice issues.

AExplanation:

Show Suggested Answer

Suggested Answer: A

by Jenelle at Apr 11, 2024, 09:20 AM

Limited Time Offer

25%

Off

Get Premium CKS Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Rashida

7 months ago

Candidate 1: Agreed. Let's focus on identifying and fixing those security issues to ensure the application is secure.

upvoted 0 times

...

Zachary

7 months ago

Candidate 2: That's correct. We should carefully go through both files to make the necessary changes.

upvoted 0 times

...

Casey

7 months ago

Candidate 4: And the manifest file might have fields that are not following best security practices.

upvoted 0 times

...

Gracia

7 months ago

Candidate 3: I believe the Dockerfile may have insecure instructions that need to be corrected.

upvoted 0 times

...

Emogene

7 months ago

Candidate 2: Yes, we need to fix two prominent security/best-practice issues in each file.

upvoted 0 times

...

Alton

7 months ago

Candidate 1: I think the task is about analyzing and editing Dockerfile and manifest file for security issues.

upvoted 0 times

...

Denae

7 months ago

I believe fixing those security issues will enhance the overall security posture of the deployment.

upvoted 0 times

...

Royal

7 months ago

Definitely, we need to prioritize security to protect the application and data.

upvoted 0 times

...

Janine

7 months ago

I think ensuring secure practices in containerization is crucial for production environments.

upvoted 0 times

...

Denae

8 months ago

I agree, it requires attention to detail to fix the security issues.

upvoted 0 times

...

Royal

9 months ago

I found the Dockerfile and manifest file tasks challenging.

upvoted 0 times

Herminia

8 months ago

I also had difficulty with the manifest file. It was challenging to identify the security issues.

upvoted 0 times

...

Carrol

8 months ago

I had trouble with the manifest file task. What about you?

upvoted 0 times

...

Beata

8 months ago

Yeah, it was tricky. Did you find the security issues in the instructions?

upvoted 0 times

...

Herminia

8 months ago

I struggled with the Dockerfile task too.

upvoted 0 times

...

Cristen

9 months ago

Definitely. I'm glad they're testing us on this stuff - it's crucial for anyone working with containers and Kubernetes. I'm ready to dive in and see what we can find. Anyone else want to take a crack at it?

upvoted 0 times

...

Carmen

9 months ago

Haha, 'juicy issues' - I like that! But you're absolutely right, we need to be really thorough in reviewing both the Dockerfile and the deployment YAML. Security and best practices are so important, especially for a certification exam.

upvoted 0 times

...

Mary

9 months ago

Good point about the base image. That's definitely a security concern, especially for a production deployment. And let's not forget about the deployment YAML file. I bet there are some juicy issues there too, like hardcoded credentials or exposing sensitive information.

upvoted 0 times

...

Talia

10 months ago

I agree, the Dockerfile is a good place to start. Maybe we're running processes as root or installing unnecessary packages. Oh, and we should definitely be using a more recent base image than Ubuntu 16.04.

upvoted 0 times

...

Trinidad

10 months ago

Alright, let's get started. First, I'll take a look at the Dockerfile. Hmm, I wonder what those prominent security/best-practice issues could be. I bet it has something to do with the base image or the packages we're installing.

upvoted 0 times

...

Arthur

10 months ago

This is a great question! I'm excited to dig into the Dockerfile and deployment YAML and see what security/best-practice issues we can identify and fix.

upvoted 0 times

...