Câu 29: CA1-005: CompTIA SecurityX

A security engineer wants to reduce the attack surface of a public-facing containerized application. Which of the following will best reduce the application's privilege escalation attack surface?

1. A. Implementing the following commands in the Dockerfile:RUN echo user:x:1000:1000:user:/home/user:/dev/null > /etc/passwd — đáp án hiện tại
2. B. Installing an EDR on the container's host, with reporting configured to log to a centralized SIEM, and implementing the following alerting rule:IF PROCESS_USER==root ALERT_TYPE==critical
3. C. Designing a multicontainer solution, with one set of containers that runs the main application, and another set of containers that performs automatic remediation by replacing compromised containers or disabling compromised accounts
4. D. Running the container in an isolated network and placing a load balancer in a public-facing network. Adding the following ACL to the load balancer:PERMIT HTTPS from 0.0.0.0.0/0 port 443