ACP Security, Compliance & Vulnerability Management 3

Question 1

Which Anaconda enterprise product provides a private, on-premise package repository with built-in security scanning?

Accepted Answer

Anaconda Team Edition / Anaconda Business

Answer

Anaconda Navigator

Answer

Anaconda Repository (formerly Anaconda Enterprise Notebooks)

Answer

Anaconda Prompt

Question 2

What does the `--no-default-packages` flag accomplish when creating a new conda environment for security-sensitive work?

Accepted Answer

Creates the environment without the packages listed in `create_default_packages`, reducing the attack surface

Answer

Prevents any package from being installed

Answer

Disables internet access during environment creation

Answer

Removes SSL certificates from the environment

Question 3

In a compliance-focused deployment, why is it important to set `channel_alias` in the conda configuration?

Accepted Answer

To redirect all channel requests through an approved internal proxy or mirror

Answer

To give channels shorter names for faster typing

Answer

To enable offline mode automatically

Answer

To assign default environment names

Question 4

Which practice best mitigates the risk of a typosquatting attack when installing conda packages?

Accepted Answer

Specifying the exact channel alongside the package name (e.g., `conda install -c trusted-mirror scipy`)

Answer

Always running `conda update conda` first

Answer

Using `pip install` instead of `conda install`

Answer

Setting `ssl_verify: false` to skip certificate checks

Question 5

What is the purpose of the `.condarc` `allowlist_channels` (formerly `whitelist_channels`) key?

Accepted Answer

Restricts conda to only use the listed channels, blocking any others

Answer

Lists channels that are always searched last

Answer

Caches the listed channels for offline use

Answer

Marks channels as read-only

Question 6

When auditing a production conda environment for compliance, which approach provides the most complete record of installed package provenance?

Accepted Answer

Running `conda list --export` and storing the output with build strings and channel URLs

Answer

Checking the `environment.yml` file

Answer

Using `pip freeze` inside the environment

Answer

Reviewing the conda cache directory timestamps

Question 7

Which security principle is best enforced by using separate conda environments for each project rather than a single shared environment?

Accepted Answer

Principle of least privilege / isolation

Answer

Defense in depth

Answer

Non-repudiation

Answer

Data integrity