Container security basics in Cybersecurity - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is a container in the context of cybersecurity?

A container is a lightweight, standalone package that includes an application and all its dependencies, allowing it to run consistently across different computing environments.

beginner

Why is container security important?

Container security is important because containers share the host system's kernel, so vulnerabilities can affect the entire system if not properly secured.

intermediate

Name one common security risk associated with containers.

One common risk is running containers with excessive privileges, which can allow attackers to escape the container and access the host system.

intermediate

What is the role of container image scanning?

Container image scanning checks for known vulnerabilities and misconfigurations in container images before deployment to prevent security issues.

intermediate

How does using minimal base images improve container security?

Minimal base images reduce the attack surface by including only essential components, lowering the chance of vulnerabilities.

What does a container share with the host system?

A The entire file system

B The operating system kernel

C The user interface

D The hardware drivers

Containers share the host system's operating system kernel but have isolated user spaces.

Which practice helps reduce container security risks?

A Using minimal base images

B Running containers as root user

C Disabling image scanning

D Sharing containers between users

Using minimal base images reduces the attack surface and improves security.

What is container image scanning used for?

A To speed up container startup

B To increase container size

C To check for vulnerabilities

D To share images publicly

Image scanning detects vulnerabilities and misconfigurations before deployment.

What can happen if a container runs with excessive privileges?

A It runs faster

B It becomes invisible to attackers

C It uses less memory

D It can escape and affect the host system

Excessive privileges can allow attackers to break out of the container and access the host.

Which of these is NOT a container security best practice?

A Ignoring vulnerability reports

B Regularly updating container images

C Running containers with least privilege

D Using trusted image sources

Ignoring vulnerability reports increases security risks and is not recommended.

Explain why container security is critical and list two common risks.

Think about how containers share resources and what can go wrong.

Describe three best practices to improve container security.

Focus on reducing risks and preventing attacks.