Linux Foundation Exam CKS Topic 3 Question 72 Discussion

Actual exam question for Linux Foundation's CKS exam

Question #: 72
Topic #: 3

[All CKS Questions]

A container image scanner is set up on the cluster.

Given an incomplete configuration in the directory

/etc/kubernetes/confcontrol and a functional container image scanner with HTTPS endpoint https://test-server.local.8081/image_policy

1. Enable the admission plugin.

2. Validate the control configuration and change it to implicit deny.

Finally, test the configuration by deploying the pod having the image tag as latest.

AExplanation:
ssh-add ~/.ssh/tempprivate
eval '$(ssh-agent -s)'
cd contrib/terraform/aws
vi terraform.tfvars
terraform init
terraform apply -var-file=credentials.tfvars
ansible-playbook -i ./inventory/hosts ./cluster.yml -e ansible_ssh_user=core -e bootstrap_os=coreos -b --become-user=root --flush-cache -e ansible_user=core

Show Suggested Answer

Suggested Answer: A

by Valentine at Jan 13, 2025, 06:47 PM

Limited Time Offer

25%

Off

Get Premium CKS Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Alayna

17 days ago

The question is a bit vague on the specifics, but I'm sure I can figure it out. After all, I'm a Kubernetes ninja!

upvoted 0 times

...

Joana

18 days ago

Wait, we're deploying a pod with the 'latest' tag? That's like playing Russian roulette with our cluster!

upvoted 0 times

...

Carrol

20 days ago

Latest tag? That's a bold move. I hope the image has been thoroughly tested and vetted.

upvoted 0 times

Maryrose

2 days ago

I agree, using the latest tag can be risky if not thoroughly tested.

upvoted 0 times

...

Gianna

1 months ago

Hmm, the HTTPS endpoint for the container image scanner seems like a potential issue. I wonder if there are any security considerations we need to keep in mind.

upvoted 0 times

Buffy

9 days ago

User 2: Agreed, we need to ensure that the configuration is secure and that we follow best practices.

upvoted 0 times

...

Cordelia

23 days ago

User 1: We should definitely consider the security implications of using an HTTPS endpoint for the container image scanner.

upvoted 0 times

...

Glory

1 months ago

The question is pretty clear, but I'm not sure about the specific steps to enable the admission plugin and change the control configuration. I'll need to double-check the documentation.

upvoted 0 times

Alesia

19 days ago

Once you have enabled the admission plugin and changed the control configuration, don't forget to test the configuration by deploying a pod with the latest image tag.

upvoted 0 times

...