Exam CAS-005 Topic 3 Question 53 Discussion

Actual exam question for CompTIA's CAS-005 exam
Question #: 53
Topic #: 3

A security engineer wants to reduce the attack surface of a public-facing containerized application. Which of the following will best reduce the application's privilege escalation attack surface?

A. Implementing the following commands in the Dockerfile:
RUN echo user:x:1000:1000:user:/home/user:/dev/null > /etc/passwd B. Installing an EDR on the container's host, with reporting configured to log to a centralized SIEM, and implementing the following alerting rule:
IF PROCESS_USER==root ALERT_TYPE==critical C. Designing a muiticontainer solution, with one set of containers that runs the mam application, and another set oi containers that perform automatic remediation by replacing compromised containers or disabling compromised accounts D. Running the container in an isolated network and placing a load balancer in a public-facing network. Adding the following ACL to the load balancer:PERMIT HTTPS from 0.0.0.0.0/0 port 443

Suggested Answer: A Vote an answer

Implementing the given commands in the Dockerfile ensures that the container runs with non-root user privileges. Running applications as a non-root user reduces the risk of privilege escalation attacks because even if an attacker compromises the application, they would have limited privileges and would not be able to perform actions that require root access.
Implementing the following commands in the Dockerfile: This directly addresses the privilege escalation attack surface by ensuring the application does not run with elevated privileges.

by Moses at Mar 20, 2026, 05:17 PM

Limited Time Offer

15%

Off

Get Premium CAS-005 Questions as Interactive Self Test Engine or PDF

Comments

0 Satisfied Customers

0 Shares

0 Demo Downloads

10 Years in Business