CV0-004 Security Practice Question
A cloud security analyst is investigating a potential container security incident. The analyst notices that a container is sending outbound traffic to a known malicious IP address. The container was deployed from an image that passed a vulnerability scan. Which TWO of the following should the analyst implement to detect and prevent such behavior in the future? (Select TWO).
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Enable runtime security monitoring for anomalous container behavior
Runtime security tools monitor container behavior for anomalies like outbound connections to malicious IPs, and scanning base image layers helps catch vulnerabilities that might allow such behavior.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Use a static IP address for all containers
Why it's wrong here
Static IPs do not prevent malicious behavior.
- ✗
Disable outbound network access for all containers
Why it's wrong here
Completely blocking outbound access may break legitimate functionality.
- ✓
Enable runtime security monitoring for anomalous container behavior
Why this is correct
Runtime security detects behavioral anomalies such as unexpected outbound connections.
- ✗
Store container secrets in environment variables
Why it's wrong here
Secrets in environment variables are a security risk; use a vault.
- ✓
Scan the container image layers for vulnerabilities during CI/CD
Why this is correct
Scanning base image layers helps prevent deployment of vulnerable images.
Go deeper
Related to this question
About these practice questions
One of 977 original CV0-004 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CV0-004 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CV0-004 exam.