Why does Docker secrets management prevent secrets from being stored in environment variables inside containers?

hard📝 Conceptual Q10 of 15

Docker - Security

AEnvironment variables can be easily exposed or leaked, while secrets mounted as files are more secure

BEnvironment variables are slower to access than files

CDocker does not support environment variables in containers

DSecrets require special encryption that environment variables cannot provide

Step-by-Step Solution

Solution:

Step 1: Understand security risks of environment variables
Environment variables can be exposed in logs, process lists, or debugging tools, making them less secure.
Step 2: Compare with secrets mounted as files
Secrets mounted as files have restricted access and are not exposed in environment or logs, improving security.
Final Answer:
Environment variables can be easily exposed or leaked, while secrets mounted as files are more secure -> Option A
Quick Check:
Secrets avoid env vars to reduce exposure risk [OK]

Quick Trick: Secrets avoid env vars to reduce accidental leaks [OK]

Common Mistakes:

Master "Security" in Docker

9 interactive learning modes - each teaches the same concept differently

Want More Practice?

15+ quiz questions · All difficulty levels · Free

More Docker Quizzes