Chapter 14 (Docker)

You need to install SSH on your containers as it is regarded as a best practice.

• True
• False

How many processes should be running per container?

• 1
• 2
• 3
• 4
• 5

When launching a container, how can we make all of it, or parts of it, read only?

• Including the read-only option in the command
• Including the read-only:true option on the volume
• Including the :ro option on the volume
• Read only is determined by the node manager.

Who has access to manage containers in Docker?

• Anyone who can access the container
• Anyone who has access to the server
• Anyone who has root permissions
• Only the Docker users

To check if a container has been modified, which command should you run?

• docker run
• docker swarm
• docker stack
• docker diff

Setting the --read-only option will make the entire filesystem read only.

• True
• False

According to CIS, you should always use the latest version of Docker

• True
• False

Which of the following are the types of output from the Docker Bench Security application?

• [PASS]
• [ERROR]
• [WARN]
• NOTICE
• [INFO]

You should only install what you need to support your application.

• True
• False

Which of the following are best practices?

• Only launch one application per container
• Review who has access to your docker host
• Only install what you need
• Add any user who needs to access the application to the docker group