Certified Application Security Engineer – .NET (CASE-.NET) — Question 1

Rockmond Dunbar is a senior DevSecOps engineer in a software development company. His organization develops customized software for retail industries. Rockmond would like to avoid setting mount propagation mode to share until it is required because when a volume is mounted in shared mode, it does not limit other containers to mount and modify that volume. If mounted volume is sensitive to changes, then it would be a serious security concern. Which of the following commands should Rockmond run to list out the propagation mode for mounted volumes?

Answer options

• A. docker ps --quiet --all | xargs docker inspect --format ‘:Propagation’
• B. docker ps -quiet -all | xargs docker inspect -format ‘:Propagation=’
• C. docker ps --quiet --all | xargs docker inspect --format ‘:Propagation=’
• D. docker ps -quiet -all | xargs docker inspect -format ‘:Propagation’

Correct answer: C

Explanation

The correct command is option C, which correctly uses the `--quiet` flag to list container IDs and then inspects them for their propagation mode using the correct format specifier. Options A and B have formatting issues or incorrect flags, while option D also has a formatting issue that prevents it from functioning as intended.