Certified Information Systems Auditor (CISA) — Question 1309

The use of which of the following is an inherent risk in the application container infrastructure?

Answer options

• A. Shared data
• B. Shared registries
• C. Shared kernel
• D. Host operating system

Correct answer: C

Explanation

The correct answer is C, Shared kernel, because containers often share the host's kernel, which can lead to security vulnerabilities if one container is compromised. The other options, while they do present risks, do not pose the same level of inherent risk associated with kernel sharing in containerized environments.