Google Cloud Professional Cloud Security Engineer Practice Exam

What type of vulnerabilities must a scanning solution for Kubernetes Engine be able to detect?

1. SQL Injection vulnerabilities

2. Cross-Site Scripting vulnerabilities

3. Malware vulnerabilities

4. Network vulnerabilities

The correct answer is: Cross-Site Scripting vulnerabilities

The focus of a scanning solution for Kubernetes Engine primarily entails identifying vulnerabilities related to container images and the orchestration of those containers within the Kubernetes environment. While Cross-Site Scripting (XSS) vulnerabilities are significant in web applications, they are not specific to the containerized environments or the Kubernetes orchestration framework. A more pertinent type of vulnerability that such a scanning solution would need to detect is malware vulnerabilities. This includes identifying malicious code or unauthorized software that could compromise the security of containerized applications. Given that containers can pull in third-party images and that the security of these images is critical, detecting malware is essential to maintaining the overall security and integrity of the Kubernetes deployment. In the context of Kubernetes, while other vulnerabilities like SQL Injection or Network vulnerabilities can be relevant, they are typically addressed more at the application or network configuration levels, rather than through a dedicated container scanning solution. Therefore, the scanning solution must be capable of identifying malware vulnerabilities to ensure that all deployed containers are secure and free from harmful elements that could exploit the containerized environment.