Which of the following is a tool used to scan and identify vulnerabilities in containers?

Which of the following is a tool used to scan and identify vulnerabilities in containers?

• A. Burp Suite
• B. Metasploit
• C. Trivy
• D. Wireshark

Answer: (C)

Scanning container images for known vulnerabilities involves examining the OS packages and dependencies inside the image and matching them against vulnerability databases to report CVEs and severity levels. Trivy is designed for this purpose, capable of scanning container images, filesystem paths, and repositories to quickly surface security issues before images are deployed. It provides actionable results, helping you decide whether to patch or replace an image. Burp Suite is geared toward testing web applications by intercepting and manipulating traffic. Metasploit is an exploit framework used to test whether vulnerabilities can be exploited. Wireshark is a network protocol analyzer used to inspect traffic. These tools serve different security tasks and aren’t focused on identifying vulnerabilities inside container images.

Scanning container images for known vulnerabilities involves examining the OS packages and dependencies inside the image and matching them against vulnerability databases to report CVEs and severity levels. Trivy is designed for this purpose, capable of scanning container images, filesystem paths, and repositories to quickly surface security issues before images are deployed. It provides actionable results, helping you decide whether to patch or replace an image.

Burp Suite is geared toward testing web applications by intercepting and manipulating traffic. Metasploit is an exploit framework used to test whether vulnerabilities can be exploited. Wireshark is a network protocol analyzer used to inspect traffic. These tools serve different security tasks and aren’t focused on identifying vulnerabilities inside container images.