Image security scanning in Kubernetes - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is image security scanning in Kubernetes?

Image security scanning is the process of checking container images for vulnerabilities before they are deployed in Kubernetes clusters. It helps ensure that images do not contain known security risks.

beginner

Name a popular tool used for image security scanning in Kubernetes.

Trivy is a popular open-source tool used for scanning container images for vulnerabilities in Kubernetes environments.

intermediate

Why should image scanning be part of the CI/CD pipeline?

Including image scanning in the CI/CD pipeline helps catch vulnerabilities early, preventing insecure images from reaching production and reducing security risks.

intermediate

What types of vulnerabilities can image scanning detect?

Image scanning can detect outdated software, known CVEs (Common Vulnerabilities and Exposures), misconfigurations, and insecure packages inside container images.

intermediate

How does integrating image scanning improve Kubernetes cluster security?

By scanning images before deployment, it prevents vulnerable containers from running, reducing attack surfaces and helping maintain a secure cluster environment.

What is the main purpose of image security scanning in Kubernetes?

A To speed up container startup time

B To find vulnerabilities in container images before deployment

C To monitor network traffic between pods

D To manage Kubernetes user permissions

Image security scanning checks container images for vulnerabilities before they are deployed to keep the environment safe.

Which tool is commonly used for scanning container images for vulnerabilities?

A Prometheus

B kubectl

C Trivy

D Helm

Trivy is a widely used open-source tool for scanning container images for security issues.

When is the best time to perform image security scanning in a DevOps workflow?

A During the CI/CD pipeline before deployment

B After the container is running in production

C Only when a security breach happens

D During Kubernetes cluster setup

Scanning images during the CI/CD pipeline helps catch vulnerabilities early and prevents risky images from being deployed.

Which of the following is NOT typically detected by image security scanning?

A Network latency issues

B Known software vulnerabilities

C Misconfigured container settings

D Outdated packages inside images

Network latency is not detected by image scanning; it focuses on vulnerabilities inside container images.

How does image scanning help maintain Kubernetes cluster security?

A By managing user access controls

B By automatically scaling pods

C By encrypting network traffic

D By preventing vulnerable images from running

Image scanning stops vulnerable container images from being deployed, reducing security risks in the cluster.

Explain what image security scanning is and why it is important in Kubernetes.

Think about how scanning helps keep containers safe before they run.

Describe how image security scanning fits into a CI/CD pipeline and its benefits.

Consider the flow from code to deployment and where scanning happens.