Linux Foundation Exam CKS Topic 1 Question 40 Discussion

Actual exam question for Linux Foundation's CKS exam

Question #: 40
Topic #: 1

[All CKS Questions]

Cluster:scanner Master node:controlplane Worker node:worker1

You can switch the cluster/configuration context using the following command:

[desk@cli] $kubectl config use-context scanner

Given: You may use Trivy's documentation.

Task: Use the Trivy open-source container scanner to detect images with severe vulnerabilities used by Pods in the namespacenato.

Look for images withHighorCriticalseverity vulnerabilities and delete the Pods that use those images. Trivy is pre-installed on the cluster's master node. Use cluster's master node to use Trivy.

AExplanation:

Show Suggested Answer

Suggested Answer: A

by Alease at Aug 10, 2023, 04:38 PM

Limited Time Offer

25%

Off

Get Premium CKS Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Glory

2 hours ago

Wait, do I need to use 'kubectl config use-context scanner' first? I don't want to accidentally delete the wrong Pods. Better be careful here.

upvoted 0 times

...

Dino

6 days ago

This is a piece of cake! I bet the answer is as simple as 'kubectl delete pod ' for any vulnerable Pods. Easy-peasy!

upvoted 0 times

...

Tracey

14 days ago

That makes sense. We should focus on images with High or Critical severity vulnerabilities in the namespace nato.

upvoted 0 times

...

Ahmed

14 days ago

Hmm, I wonder if I need to have specific permissions to use Trivy on the master node. I better double-check the documentation just to be sure.

upvoted 0 times

...

Adolph

17 days ago

The question is clear and the task is straightforward. I should be able to use Trivy on the master node to scan the images in the 'nato' namespace and delete the vulnerable Pods.

upvoted 0 times

Xochitl

2 days ago

I will switch the cluster context to 'scanner' using the command provided.

upvoted 0 times

...

Tamra

18 days ago

I think we need to carefully read the task and use the Trivy tool on the master node to find and delete Pods with critical vulnerabilities.

upvoted 0 times

...

Tracey

27 days ago

I'm nervous about the exam question on using Trivy to detect vulnerabilities.

upvoted 0 times

...