A cloud security engineer is implementing controls to ensure that an attacker who compromises a container cannot escalate privileges to access the host operating system or other containers. Which security practice addresses this requirement?

Question

Accepted Answer

A. Container security hardening — running containers as non-root, using read-only filesystems, and applying security profiles. Container security hardening prevents privilege escalation from container to host by running containers as non-root users, using read-only filesystem mounts, and applying security profiles (e.g., seccomp, AppArmor). The CompTIA Cloud+ V4 Security domain lists container security as a specific objective within cloud security.

A cloud security engineer is implementing controls to ensure that an attacker who compromises a container cannot escalate privileges to access the host operating system or other containers. Which security practice addresses this requirement?

Related Questions

Discussion