Linux Foundation Exam CKS Topic 1 Question 61 Discussion

Actual exam question for Linux Foundation's CKS exam

Question #: 61
Topic #: 1

Task

Analyze and edit the given Dockerfile /home/candidate/KSSC00301/Docker file (based on the ubuntu:16.04 image), fixing two instructions present in the file that are prominent security/best-practice issues.

Analyze and edit the given manifest file /home/candidate/KSSC00301/deployment.yaml, fixing two fields present in the file that are prominent security/best-practice issues.

AExplanation:

Show Suggested Answer

Suggested Answer: A

by Aliza at Aug 04, 2024, 06:45 AM

Limited Time Offer

25%

Off

Get Premium CKS Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Marisha

4 months ago

I agree, let's focus on that to ensure the files are secure.

upvoted 0 times

...

Reita

5 months ago

Yes, we need to identify and correct the prominent security/best-practice issues.

upvoted 0 times

...

Melodie

5 months ago

Wait, are they asking us to fix security issues? I thought this was a baking contest. *laughs*

upvoted 0 times

...

Ailene

5 months ago

I hope the answers aren't too obvious. That would be a letdown. Let's see what I can find.

upvoted 0 times

...

Marisha

5 months ago

I think we need to analyze and edit them to fix security issues.

upvoted 0 times

...

Felix

5 months ago

Ah, the classic security and best practice challenge. Time to put my skills to the test!

upvoted 0 times

Andree

4 months ago

User 2

upvoted 0 times

...

Kimbery

4 months ago

User 1

upvoted 0 times

...

Reita

5 months ago

I found the Dockerfile and manifest file in the exam.

upvoted 0 times

...

Dahlia

5 months ago

Yes, let's address the security vulnerabilities in both files to adhere to best practices.

upvoted 0 times

...

Rosendo

5 months ago

Hmm, this looks like a tricky one. I better review the instructions and the image examples carefully.

upvoted 0 times

Tricia

5 months ago

Agreed, let's start by analyzing and editing the Dockerfile to address those issues.

upvoted 0 times

...

Catalina

5 months ago

I think we need to focus on fixing the security issues in the Dockerfile first.

upvoted 0 times

...

Viola

5 months ago

I think we should focus on editing the manifest file as well, security is crucial.

upvoted 0 times

...

Bernadine

6 months ago

The Dockerfile and deployment.yaml files seem to have some security issues. Let's see if I can spot them.

upvoted 0 times

Moon

5 months ago

In the manifest file, we should remove any hardcoded passwords or sensitive information. That's definitely a security best practice.

upvoted 0 times

...

Carin

5 months ago

You're right. Another issue could be the use of 'ADD' instruction instead of 'COPY' in the Dockerfile. 'COPY' is considered more secure.

upvoted 0 times

...

Celestine

5 months ago

I think one of the security issues in the Dockerfile is the use of 'latest' tag for the base image. We should specify a specific version for better security.

upvoted 0 times

...

Lonny

6 months ago

I agree, we need to fix those security issues to ensure our container is safe.

upvoted 0 times

...

Claudio

6 months ago

I found the Dockerfile instructions to be a bit insecure.

upvoted 0 times

...