CAS-005 · Question #494
A DevOps engineer sets up a CI/CD pipeline to deploy application container images in the Kubernetes production environment. The security engineer wants to prevent the deployment of unsecured images…
The correct answer is C. Trusted attestation. Trusted attestation ensures that only container images meeting defined security and integrity requirements are allowed in the pipeline. This prevents the deployment of unsecured or tampered images into the Kubernetes production environment.
Question
A DevOps engineer sets up a CI/CD pipeline to deploy application container images in the Kubernetes production environment. The security engineer wants to prevent the deployment of unsecured images. Which of the following security solutions should the engineer use in the pipeline to meet this objective?
Options
- AVulnerability scanning
- BStatic code analysis
- CTrusted attestation
- DPrivate repository
How the community answered
(20 responses)- A5% (1)
- B25% (5)
- C55% (11)
- D15% (3)
Explanation
Trusted attestation ensures that only container images meeting defined security and integrity requirements are allowed in the pipeline. This prevents the deployment of unsecured or tampered images into the Kubernetes production environment.
Community Discussion
No community discussion yet for this question.