ACP Security, Compliance & Vulnerability Management

Question 1

Which command is used to scan a conda environment for known security vulnerabilities?

Accepted Answer

conda audit

Answer

`conda audit` is the built-in Anaconda tool that scans packages in an environment against known CVE databases.

Question 2

What does CVE stand for in the context of Anaconda security scanning?

Accepted Answer

Common Vulnerabilities and Exposures

Answer

CVE stands for Common Vulnerabilities and Exposures, the industry-standard identifier for publicly known security flaws.

Question 3

In Anaconda Enterprise, which feature restricts users to installing packages only from approved internal channels?

Accepted Answer

Package allowlisting via channel configuration

Answer

Package allowlisting via channel configuration ensures only vetted, approved packages from internal mirrors can be installed, enforcing compliance.

Question 4

Which file format does `conda audit` primarily reference to identify vulnerable package versions?

Accepted Answer

NIST NVD / OSV database feeds

Answer

`conda audit` queries vulnerability databases such as the NIST National Vulnerability Database (NVD) and OSV to match installed packages against known CVEs.

Question 5

What is the purpose of setting the `ssl_verify` configuration option in conda?

Accepted Answer

Verifies SSL certificates when connecting to package repositories

Answer

`ssl_verify` controls whether conda validates the SSL/TLS certificate of remote channels, preventing man-in-the-middle attacks during downloads.

(ACP) Anaconda Certified Professional Practice Test

(ACP) Anaconda Certified Professional Practice Test

ACP Security, Compliance & Vulnerability Management