Container and Kubernetes Security Testing Questions

Focuses on assessing and testing the security posture of container images, runtimes, and Kubernetes clusters. Areas covered include container image vulnerability assessment and supply chain security, image signing and provenance, registry and build pipeline hardening, static and dynamic scanning tools, and common container escape and privilege escalation vectors. On the orchestration side, topics include cluster hardening, role based access control, admission controllers and policies, pod security standards, network policies, secrets management, persistent storage security, and runtime detection and response. Also includes methodologies for security testing such as threat modeling, penetration testing and red team exercises for containerized environments, validating mitigations across development test and production contexts, and automating security checks in CI CD pipelines.