ACP Security, Compliance & Vulnerability Management

Question 1

Which command is used to scan a conda environment for known security vulnerabilities?

Accepted Answer

conda audit

Answer

conda scan --security

Answer

conda verify --cve

Answer

conda check --vulnerabilities

Question 2

What does CVE stand for in the context of Anaconda security scanning?

Accepted Answer

Common Vulnerabilities and Exposures

Answer

Common Vulnerability Exposure

Answer

Conda Version Error

Answer

Certified Vulnerability Entry

Question 3

In Anaconda Enterprise, which feature restricts users to installing packages only from approved internal channels?

Accepted Answer

Package allowlisting via channel configuration

Answer

Channel pinning

Answer

conda lock enforcement

Answer

Namespace isolation

Question 4

Which file format does `conda audit` primarily reference to identify vulnerable package versions?

Accepted Answer

NIST NVD / OSV database feeds

Answer

conda-lock.yml

Answer

requirements.txt

Answer

environment.yml

Question 5

What is the purpose of setting the `ssl_verify` configuration option in conda?

Accepted Answer

Verifies SSL certificates when connecting to package repositories

Answer

Encrypts the local package cache

Answer

Validates package signatures after download

Answer

Enables two-factor authentication for conda login

Question 6

Which conda configuration setting allows an organization to mirror Anaconda's default channel on a private server for security compliance?

Accepted Answer

default_channels

Answer

channel_mirror

Answer

offline_mode

Answer

proxy_servers

Question 7

When running `conda audit` on an environment, what output indicates that a package has a critical severity vulnerability?

Accepted Answer

A CRITICAL severity tag with the associated CVE ID

Answer

A yellow WARNING label

Answer

An asterisk (*) next to the package name

Answer

A broken-pipe error in the terminal