PCSFE practice question 8 of 15
Why are containers uniquely suitable for runtime security based on allow lists?
Full set: 65 questionsCorrect Answer:
A. Containers have only a few defined processes that should ever be executed.
Explanation
Containers are uniquely suitable for runtime security based on allow lists because containers have only a few defined processes that should ever be executed. Developers can specify the processes that are allowed to run in a container using a Dockerfile, but this does not guarantee that only those processes will run at runtime. Therefore, using an allow list approach can prevent any unauthorized or malicious processes from running in a container2. Reference: Container Security
Keep practicing
Take the free PCSFE practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other PCSFE practice questions
- Question 1Which three NSX features can be pushed from Panorama in PAN-OS? (Choose three.)
- Question 2Which two deployment modes of VM-Series firewalls are supported across NSX-T? (Choose two…
- Question 3Which offering can gain visibility and prevent an attack by a malicious actor attempting …
- Question 4What must be enabled when using Terraform templates with a Cloud next-generation firewall…
- Question 5What is required to integrate a Palo Alto Networks VM-Series firewall with Azure Orchestr…
- Question 6Which solution is best for securing an EKS environment?
