Bird
0
0

You want to improve security by restricting your app's access to an external database using the ambassador container pattern. Which approach best achieves this?

hard📝 Workflow Q15 of 15
Docker - Production Patterns
You want to improve security by restricting your app's access to an external database using the ambassador container pattern. Which approach best achieves this?
AAllow the app container to connect directly to the database and use ambassador only for logging.
BConfigure the ambassador container to handle all database connections and apply network policies to block direct app access.
CRun the ambassador container in a separate pod with public IP to filter traffic.
DDisable the ambassador container and let the app connect directly for simplicity.
Step-by-Step Solution
Solution:
  1. Step 1: Use ambassador as controlled proxy

    Configure ambassador to manage all database connections, acting as a gatekeeper.
  2. Step 2: Apply network policies

    Block direct app access to the database, forcing traffic through ambassador for security.
  3. Final Answer:

    Configure the ambassador container to handle all database connections and apply network policies to block direct app access. -> Option B
  4. Quick Check:

    Ambassador proxy + network policies = secure access [OK]
Quick Trick: Use ambassador as proxy and block direct app access [OK]
Common Mistakes:
  • Allowing direct app access to database
  • Running ambassador outside pod with public IP
  • Disabling ambassador for simplicity

Want More Practice?

15+ quiz questions · All difficulty levels · Free

Free Signup - Practice All Questions
More Docker Quizzes