XK0-005 Domain 3: Scripting, Containers, and Automation

Which TWO are container best practices? (Select TWO.)

Multiple response — select two or more answers

Answer choices

  1. a. Run as non-root user
  2. b. Use latest tag only always in prod
  3. c. Scan images for CVEs
  4. d. Store secrets in image layers
  5. e. Pin image digests/tags

Architectural breakdown & explanation

Non-root, scanning, and pinning improve container security.

Correct answer(s): a. Run as non-root user, c. Scan images for CVEs, e. Pin image digests/tags

Exam domain: Domain 3: Scripting, Containers, and Automation (29% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the CompTIA Linux+ bank. Run a full timed practice exam with domain-weighted random questions in your browser.