When configuring CrowdStrike to perform an image assessment, which step is required to obtain registry credentials for a container registry from the approved registry list?

Question

Options

• AUse the CrowdStrike API to directly retrieve credentials from the registry.
• BUse a command-line tool to authenticate with the container registry and export the credentials to a
• CConfigure the container registry to push credentials to CrowdStrike via a webhook.
• DGenerate a service account key with read-only access to the container registry.

• B
  10% (2)
• C
  5% (1)
• D
  86% (18)

Explanation

Option A: The CrowdStrike API cannot directly retrieve credentials from a container registry. Credentials must be manually configured or provided through secure integration. Option B: While using a command-line tool can authenticate with a registry, exporting credentials to a file is not recommended due to the risk of exposure. CrowdStrike supports direct integration using service account keys or other secure methods. Option C: Container registries do not support pushing credentials to CrowdStrike through webhooks. Webhooks are generally used for event notifications, not credential management. Option D: Generating a service account key with read-only access to the container registry ensures that CrowdStrike has the necessary permissions to pull container images for assessment. This approach follows best practices by limiting the scope of access to avoid unnecessary security risks.

No community discussion yet for this question.