nerdexam
CompTIA

CAS-005 · Question #494

A DevOps engineer sets up a CI/CD pipeline to deploy application container images in the Kubernetes production environment. The security engineer wants to prevent the deployment of unsecured images…

The correct answer is C. Trusted attestation. Trusted attestation ensures that only container images meeting defined security and integrity requirements are allowed in the pipeline. This prevents the deployment of unsecured or tampered images into the Kubernetes production environment.

Submitted by fernanda_arg· Mar 6, 2026Security Engineering

Question

A DevOps engineer sets up a CI/CD pipeline to deploy application container images in the Kubernetes production environment. The security engineer wants to prevent the deployment of unsecured images. Which of the following security solutions should the engineer use in the pipeline to meet this objective?

Options

  • AVulnerability scanning
  • BStatic code analysis
  • CTrusted attestation
  • DPrivate repository

How the community answered

(20 responses)
  • A
    5% (1)
  • B
    25% (5)
  • C
    55% (11)
  • D
    15% (3)

Explanation

Trusted attestation ensures that only container images meeting defined security and integrity requirements are allowed in the pipeline. This prevents the deployment of unsecured or tampered images into the Kubernetes production environment.

Community Discussion

No community discussion yet for this question.

Full CAS-005 Practice