Which standard approach to security is augmented by the 4C's of Cloud Native security?

Answer(s): C

In a Kubernetes cluster, what are the security risks associated with using ConfigMaps for storing secrets?

Storing secrets in ConfigMaps does not allow for fine-grained access control via RBAC.
Storing secrets in ConfigMaps can expose sensitive information as they are stored in plaintext and can be accessed by unauthorized users.
Using ConfigMaps for storing secrets might make applications incompatible with the Kubernetes cluster.
ConfigMaps store sensitive information in etcd encoded in base64 format automatically, which does not ensure confidentiality of data.

Answer(s): B,D

What is the difference between gVisor and Firecracker?

gVisor is a user-space kernel that provides isolation and security for containers. At the same time, Firecracker is a lightweight virtualization technology for creating and managing secure, multi-tenant container and function-as-a-service (FaaS) workloads.
gVisor is a lightweight virtualization technology for creating and managing secure, multi-tenant container and function-as-a-service (FaaS) workloads. At the same time, Firecracker is a user-space kernel that provides isolation and security for containers.
gVisor and Firecracker are both container runtimes that can be used interchangeably.
gVisor and Firecracker are two names for the same technology, which provides isolation and security for containers.

Answer(s): A