Kubernetes and Cloud Native Associate (KCNA)Cloud Native SecurityEasy
A development team is deploying a new application to a Kubernetes cluster. To enhance the security posture of their container images, they decide to implement a process that cryptographically verifies the origin and integrity of all images before deployment. Which of the following cloud-native security practices directly addresses this requirement?
- ARuntime Security Monitoring
- BNetwork Policy Enforcement
- CSecrets Management
- DImage Signing and Verification
Show answer & explanationAnswer & explanation
Correct answer: D. Image Signing and Verification
Image Signing and Verification ensures that container images come from trusted sources and have not been tampered with. This cryptographic process validates the integrity and authenticity of the image, which is crucial for supply chain security.
Why the other options are wrong
- A. Runtime Security Monitoring focuses on detecting anomalies during container execution, not image integrity before deployment.
- B. Network Policy Enforcement controls network traffic between Pods, which is unrelated to image origin or integrity.
- C. Secrets Management handles sensitive data like API keys and passwords, not the integrity of container images.
Image Signing and Verification
A cloud-native security practice that involves digitally signing container images to confirm their origin and integrity, and then verifying these signatures before deployment.
- Ensures images come from trusted sources.
- Verifies images have not been tampered with.
- Crucial for supply chain security.
Memory trick: Signed images sail safely.