Docker Certified Associate (DCA) — Question 22
Will a DTR security scan detect this?
image configuration poor practices, such as exposed ports or inclusion of compilers in production images
Answer options
- A. Yes
- B. No
Correct answer: B
Explanation
The correct answer is B because DTR security scans primarily focus on vulnerabilities and compliance issues related to known CVEs rather than detecting poor configuration practices. Options like exposed ports or compilers in production images fall under best practices rather than security vulnerabilities, which is why they are not flagged by such scans.