ACP Security, Compliance & Vulnerability Management 2

Question 1

Which conda command verifies the integrity of downloaded packages using cryptographic checksums?

Accepted Answer

conda verify

Answer

conda install --check-integrity

Answer

conda package --verify

Answer

conda clean --verify

Question 2

What is the role of package signing in Anaconda's security model?

Accepted Answer

It cryptographically authenticates that packages come from a trusted publisher

Answer

It compresses packages for faster downloads

Answer

It assigns a unique build number to each package version

Answer

It encrypts package contents to prevent reverse engineering

Question 3

In Anaconda's role-based access control (RBAC), which role typically has permission to publish packages to a private channel?

Accepted Answer

Contributor or higher (e.g., Owner)

Answer

Viewer

Answer

Anonymous user

Answer

Read-only collaborator

Question 4

Which Anaconda feature allows administrators to audit which users installed or updated packages in a shared enterprise environment?

Accepted Answer

Anaconda Nucleus activity logs

Answer

conda history --users

Answer

environment.yml diff tracking

Answer

PM2 process logs

Question 5

What is the recommended practice to prevent supply chain attacks when using conda?

Accepted Answer

Pin package versions and restrict channels to trusted internal mirrors

Answer

Always use the `--force-reinstall` flag

Answer

Disable SSL verification to speed up downloads

Answer

Use `conda update --all` before every project run

Question 6

Which file in a conda environment records the exact package versions and build strings for full reproducibility and security auditing?

Accepted Answer

conda-lock.yml

Answer

environment.yml

Answer

requirements.txt

Answer

setup.cfg

Question 7

When configuring a conda channel with `channel_priority: strict`, what is the security benefit?

Accepted Answer

It ensures packages are only resolved from the highest-priority channel, avoiding accidental use of untrusted channels

Answer

It prevents older package versions from being installed

Answer

It forces HTTPS on all channel URLs

Answer

It disables third-party channel access entirely