Palo Alto Networks Exam PSE-StrataDC Topic 1 Question 50 Discussion

Actual exam question for Palo Alto Networks's PSE-StrataDC exam

Question #: 50
Topic #: 1

[All PSE-StrataDC Questions]

Why are containers uniquely suitable for whitelist-based runtime security?

ADevelopers typically define the processes used in their containers within the Dockerfile

BDocker has a built-in runtime analysis capability to aid in whitelisting.

CContainers typically have only a few defined processes that should ever be executed.

DOperations teams typically know what processes are used within a container

Show Suggested Answer

Suggested Answer: A

by Alyce at Dec 14, 2023, 01:20 PM

Limited Time Offer

25%

Off

Get Premium PSE-StrataDC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Tamra

8 months ago

Hah, yeah, the ops teams definitely have a handle on what's supposed to be running in those containers. I bet they love the idea of being able to just whitelist the approved processes and block everything else.

upvoted 0 times

...

Cecily

8 months ago

Yeah, and Docker's runtime analysis capabilities can really help automate the process of building that whitelist. It can monitor the container and suggest the minimum set of processes that need to be allowed.

upvoted 0 times

...

8 months ago

This question is really getting at the heart of why containers are so well-suited for a whitelist-based security approach. The key is that containers typically have a very small, defined set of processes that should be running - unlike a traditional server or VM which can have all sorts of random processes.

upvoted 0 times

...