Exam CISA topic 1 question 855 discussion

Answer C Both options C and D can be considered inherent risks in an application container infrastructure. However, the shared kernel (option C) is typically a more significant concern because it directly exposes the underlying operating system to potential vulnerabilities. While the host operating system (option D) also poses inherent risks, it is typically managed separately from the containerized applications and may have its own security measures in place. Therefore, the shared kernel presents a more immediate and critical risk factor.

C. Shared kernel The use of a shared kernel is an inherent risk in application container infrastructure. Containers share the host operating system's kernel, which means they can potentially access and impact the kernel and other containers running on the same host. This shared kernel can lead to security vulnerabilities and isolation challenges if not properly managed and secured.