ITGSS Certified DevOps Engineer Practice Test

What type of volume is recommended for mounting sensitive data in containers?

1. Read-only volumes

2. Writable volumes

3. Temporary volumes

4. Shared volumes

The correct answer is: Read-only volumes

Mounting sensitive data in containers is best accomplished using read-only volumes. This approach enhances security by preventing any alterations to the sensitive data during the container's runtime. By making the volume read-only, you're essentially locking down the data, which mitigates the risk of accidental changes or deletion by processes running within the container. It ensures that the application has access to the necessary data without the ability to modify it, which is especially important for maintaining data integrity and compliance with data protection standards. Read-only volumes provide a layer of protection for sensitive information, ensuring that the data remains in its original state. This is particularly useful in environments where data confidentiality is paramount. It also allows multiple containers to access the same sensitive data without the risk of unauthorized modifications.