Palo Alto Networks Exam PSE-StrataDC Topic 8 Question 65 Discussion

Actual exam question for Palo Alto Networks's PSE-StrataDC exam

Question #: 65
Topic #: 8

[All PSE-StrataDC Questions]

Why are containers uniquely suitable for whitelist-based runtime security?

ADevelopers typically define the processes used in their containers within the Dockerfile

BDocker has a built-in runtime analysis capability to aid in whitelisting.

CContainers typically have only a few defined processes that should ever be executed.

DOperations teams typically know what processes are used within a container

Show Suggested Answer

Suggested Answer: A

by Jaclyn at Jul 13, 2024, 09:29 PM

Limited Time Offer

25%

Off

Get Premium PSE-StrataDC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Denna

4 months ago

B) Docker's runtime analysis could be helpful, but I'd rather just stick to the simple truth - containers have a small attack surface. *wink*

upvoted 0 times

Brent

3 months ago

B) Docker's runtime analysis could be helpful, but I'd rather just stick to the simple truth - containers have a small attack surface. *wink*

upvoted 0 times

...

Janna

3 months ago

D) Operations teams typically know what processes are used within a container

upvoted 0 times

...

Emily

3 months ago

C) Containers typically have only a few defined processes that should ever be executed.

upvoted 0 times

...

Malissa

3 months ago

A) Developers typically define the processes used in their containers within the Dockerfile

upvoted 0 times

...

Aleisha

4 months ago

This question is a piece of cake! Containers are like little boxes with a limited set of toys inside - perfect for whitelist-based security.

upvoted 0 times

Barbra

3 months ago

C) Containers typically have only a few defined processes that should ever be executed.

upvoted 0 times

...

Barbra

3 months ago

A) Developers typically define the processes used in their containers within the Dockerfile.

upvoted 0 times

...

Shawnda

4 months ago

Yes, knowing what processes are used helps in creating a secure whitelist.

upvoted 0 times

...

Cristina

4 months ago

D) Yep, the operations team's knowledge of the container's processes is key to setting up an effective whitelist.

upvoted 0 times

Ena

4 months ago

D) Operations teams typically know what processes are used within a container.

upvoted 0 times

...

Ena

4 months ago

C) Containers typically have only a few defined processes that should ever be executed.

upvoted 0 times

...

Ena

4 months ago

A) Developers typically define the processes used in their containers within the Dockerfile.

upvoted 0 times

...

Pearlie

4 months ago

A) Defining the processes in the Dockerfile is a great way to ensure that the container only runs what the developer intended.

upvoted 0 times

...

Lakeesha

4 months ago

C) Containers typically have only a few defined processes that should ever be executed. This makes it easier to create a comprehensive whitelist of allowed processes.

upvoted 0 times

Karan

4 months ago

D) Operations teams typically know what processes are used within a container

upvoted 0 times

...

Lashawnda

4 months ago

C) Containers typically have only a few defined processes that should ever be executed.

upvoted 0 times

...

Beatriz

4 months ago

B) Docker has a built-in runtime analysis capability to aid in whitelisting.

upvoted 0 times

...

Elinore

4 months ago

A) Developers typically define the processes used in their containers within the Dockerfile

upvoted 0 times

...

Huey

5 months ago

I believe containers are also suitable because operations teams are aware of the processes used.

upvoted 0 times

...

Nickolas

5 months ago

That's true, having defined processes makes it easier to whitelist only the necessary ones.

upvoted 0 times

...

Shawnda

5 months ago

I think containers are suitable for whitelist-based security because developers define processes in Dockerfile.

upvoted 0 times

...