Docker - Security
You want to ensure your Docker host complies with CIS benchmarks and automatically fix non-compliant container configurations. Which approach is best?
You want to ensure your Docker host complies with CIS benchmarks and automatically fix non-compliant container configurations. Which approach is best?
hard📝 Workflow Q8 of 15
Step-by-Step Solution
Solution:
Step 1: Understand CIS benchmark scanning and fixing
Docker Bench Security scans and reports issues but does not fix them automatically.Step 2: Combine scanning with enforcement
Use a configuration management tool (like Ansible) to apply fixes based on scan results.Final Answer:
Use Docker Bench Security for scanning and a configuration management tool to enforce fixes -> Option BQuick Check:
Scan + enforce fixes = Best compliance approach [OK]
Quick Trick: Combine scanning with automation tools for compliance [OK]
Common Mistakes:
- Expecting Docker Bench Security to fix issues automatically
- Ignoring scan results until problems occur
- Disabling containers without root cause analysis
Master "Security" in Docker
Want More Practice?
15+ quiz questions · All difficulty levels · Free
Free Signup - Practice All QuestionsMore Docker Quizzes