Security benchmarks (CIS Docker) - Interactive Code Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the command to scan Docker images using the CIS benchmark tool.

Docker

docker run --rm -v /var/run/docker.sock:/var/run/docker.sock [1]

Drag options to blanks, or click blank then click option'

Anginx

Bubuntu

Ccisecurity/cis-docker-benchmark

Dalpine

Attempts:

3 left

💡 Hint

Common Mistakes

Using unrelated images like 'ubuntu' or 'nginx' which do not perform CIS scans.

The official CIS Docker Benchmark image is 'cisecurity/cis-docker-benchmark' which scans Docker images for security compliance.

2fill in blank

medium

Complete the command to run the CIS Docker Benchmark with verbose output.

Docker

docker run --rm -v /var/run/docker.sock:/var/run/docker.sock cisecurity/cis-docker-benchmark [1]

Drag options to blanks, or click blank then click option'

A--help

B--quiet

C--silent

D--verbose

Attempts:

3 left

💡 Hint

Common Mistakes

Using '--quiet' or '--silent' which reduce output instead of increasing it.

The '--verbose' flag enables detailed output during the CIS Docker Benchmark scan.

3fill in blank

hard

Fix the error in this Docker CIS benchmark command to correctly mount the Docker socket.

Docker

docker run --rm -v [1]:/var/run/docker.sock cisecurity/cis-docker-benchmark

Drag options to blanks, or click blank then click option'

A/var/run/docker.sock

B/docker.sock

C/var/lib/docker.sock

D/run/docker.sock

Attempts:

3 left

💡 Hint

Common Mistakes

Using incorrect paths like '/docker.sock' or '/var/lib/docker.sock' which do not exist.

The Docker socket is located at '/var/run/docker.sock' on the host and must be mounted to the same path inside the container.

4fill in blank

hard

Fill both blanks to create a Docker command that runs the CIS benchmark and saves the report to a local directory.

Docker

docker run --rm -v /var/run/docker.sock:/var/run/docker.sock -v [1]:/report cisecurity/cis-docker-benchmark [2]

Drag options to blanks, or click blank then click option'

A/home/user/cis_reports

B--output

C--save

D/tmp/reports

Attempts:

3 left

💡 Hint

Common Mistakes

Using incorrect flags like '--save' which is not supported.

Mounting wrong directories that do not exist.

Mount the local directory '/home/user/cis_reports' to '/report' in the container and use the '--output' flag to save the report.

5fill in blank

hard

Fill all three blanks to create a command that runs the CIS Docker Benchmark, outputs in JSON format, and saves the report to a mounted directory.

Docker

docker run --rm -v /var/run/docker.sock:/var/run/docker.sock -v [1]:/report cisecurity/cis-docker-benchmark [2] [3]

Drag options to blanks, or click blank then click option'

A/var/lib/cis_reports

B--output

Cjson

D--format

Attempts:

3 left

💡 Hint

Common Mistakes

Mixing up '--output' and '--format' flags.

Using unsupported output formats.

Mount '/var/lib/cis_reports' to '/report', use '--output' to specify saving, and '--format' to set output format like 'json'.