Your organization wants to integrate the Falcon CWPP Image Scanning Script into its CI/CD pipeline to ensure container images are assessed for vulnerabilities before deployment. What is the first step

Question

Options

• AManually scan images using the falcon-image-scan CLI command.
• BGenerate a YAML configuration file for the CI/CD pipeline.
• CCreate a service account with read-only permissions in your container registry.
• DObtain the Falcon API Client ID and Secret for authentication.

• B
  4% (1)
• C
  4% (1)
• D
  93% (26)

Explanation

Option A: While manual scanning may be used for testing purposes, it does not integrate the script into the CI/CD pipeline. Moreover, manual scanning bypasses the automation goal of CI/CD integration. Option B: This step is required later when integrating the scanning process into the CI/CD pipeline, but it is not the first step. Without proper authentication, subsequent steps cannot be Option C: A service account may be needed to access container images stored in the registry, but it is not a prerequisite for integrating the Falcon Image Scanning Script. Authentication with the Falcon platform takes precedence. Option D: The Falcon API Client ID and Secret are required to authenticate with the CrowdStrike Falcon platform. This step is essential for establishing communication between the Image Scanning Script and the Falcon platform to retrieve scanning policies and report results. Without proper authentication, the script cannot access necessary resources or execute vulnerability

No community discussion yet for this question.