Cybersecurity · hands-on lab
DO280 Lab 15: Run Privileged Applications with SCCs and Service Accounts
See why an image that needs root fails under the restricted SCC, find the right SCC, and grant it only to a dedicated service account.
- 45 minutesTime in the lab
- AdvancedLevel
- 4 tasksChecked automatically
- CertificateVerifiable link when you finish
The situation
A vendor image insists on running as root and binding port 80. It must run, without loosening security for anything else.
What you will do
- Guided exercise: Why it fails
- Guided exercise: A service account with anyuid
- Lab: Run it with the service account
- Defaultquestion
How it works
The lab opens in your browser: a real terminal or desktop, nothing to install. Work through the tasks, press Check after each one and the portal verifies your work. Stuck? Ask for a hint. Finish every task and you get a certificate page with its own verification link for LinkedIn or your CV.