PCSFE practice question 8 of 15

Why are containers uniquely suitable for runtime security based on allow lists?

Full set: 65 questions
Answer options
A: Containers have only a few defined processes that should ever be executed. Correct answer
B: Developers define the processes used in containers within the Dockerfile.
C: Docker has a built-in runtime analysis capability to aid in allow listing.
D: Operations teams know which processes are used within a container.
Correct Answer:
A. Containers have only a few defined processes that should ever be executed.
Explanation

Containers are uniquely suitable for runtime security based on allow lists because containers have only a few defined processes that should ever be executed. Developers can specify the processes that are allowed to run in a container using a Dockerfile, but this does not guarantee that only those processes will run at runtime. Therefore, using an allow list approach can prevent any unauthorized or malicious processes from running in a container2. Reference: Container Security

Scroll to Top