Security Monitoring for Container Instances and Apps

What you'll be asked

1. Which of the following is considered a best practice for monitoring the security of containerized applications in production?
2. When monitoring containerized applications, what is the primary purpose of 'drift detection'?
3. You are monitoring a containerized application and notice an unexpected outbound connection to an unknown IP address from a web server container. Which security monitoring strategy would best help you investigate this?
4. Which approach is most effective for ensuring security visibility into ephemeral container instances that may only exist for a few minutes?
5. In a Kubernetes environment, you want to detect unauthorized attempts to access the API server from within a container. Which monitoring feature provides the most granular audit trail for these actions?

Answers and explanations come after you submit.