A company is moving from the use of web servers hosted in an internal data center to a containerized cloud platform. An analyst has been asked to identify indicators of compromise in the containerized environment. Which of the following would best indicate a running container has been compromised?

A. A container from an approved software image has drifted.

B. An approved software orchestration container is running with root privileges.

C. A container from an approved software image has stopped responding.

D. A container from an approved software image fails to start.








 

Suggested Answer: A

Community Answer: A



This question is in CS0-002 CompTIA Cybersecurity Analyst (CySA+) Exam
For getting CompTIA Cybersecurity Analyst (CySA+) Certificate


Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by CompTIA. 
Trademarks, certification & product names are used for reference only and belong to CompTIA.
The website does not contain actual questions and answers from CompTIA's Certification Exams.