[Solved] Which strategy best reduces the attack surface of a containerized application? — Ans: Use minimal base images and run containers with non-root users | Docker

Docker - Security

Which strategy best reduces the attack surface of a containerized application?

ARun containers with root privileges for easier management

BInstall all software packages to ensure functionality

CUse minimal base images and run containers with non-root users

DExpose all container ports to the host network

Step-by-Step Solution

Solution:

Step 1: Define attack surface reduction
Reducing unnecessary software and privileges limits potential vulnerabilities.
Step 2: Analyze options
Minimal images and non-root users reduce risks; installing all packages or exposing ports increases attack surface.
Final Answer:
Use minimal base images and run containers with non-root users -> Option C
Quick Check:
Attack surface reduction = Minimal images + non-root users [OK]

Quick Trick: Minimal images + non-root users = safer containers [OK]

Common Mistakes:

Master "Security" in Docker

9 interactive learning modes - each teaches the same concept differently

More Docker Quizzes

Which strategy best reduces the attack surface of a containerized application?