Courseiva
← CCSP
Full test
hardMultiple ChoiceObjective-mapped

CCSP Practice Question: During a security audit of a Kubernetes…

During a security audit of a Kubernetes deployment, a team finds that containers are allowed to run as root with full privilege escalation. Which IaC scanning tool would have detected this misconfiguration before deployment?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

KICS

KICS (Keeping Infrastructure as Code Secure) is a tool that scans IaC files for security misconfigurations, including Kubernetes manifests. It can detect containers running as root with privilege escalation.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✗

    Snyk

    Why it's wrong here

    Snyk is primarily a dependency scanner, not focused on IaC misconfigurations for Kubernetes.

  • ✓

    KICS

    Why this is correct

    KICS is designed to scan Kubernetes manifests and can detect security issues like running as root with privilege escalation.

  • ✗

    Checkov

    Why it's wrong here

    Checkov scans Terraform and CloudFormation, but its Kubernetes support is less comprehensive than KICS for this specific issue.

  • ✗

    Dependabot

    Why it's wrong here

    Dependabot automates dependency updates, not IaC scanning.

About these practice questions

This CCSP question is part of Courseiva's 964-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This CCSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CCSP exam.