A security team is tasked with creating an image assessment policy in the Falcon Cloud to scan container images for vulnerabilities before deployment. Which of the following configurations is required

Question

Options

• ASpecify the severity levels (e.g., Critical, High, Medium) for vulnerabilities to flag.
• BEnable the "Audit Mode" to enforce runtime image assessment.
• CEnable the "Real-time Scanning" option to automatically block all unscanned images.
• DAssign the policy to a specific Kubernetes namespace only.

• A
  91% (31)
• C
  3% (1)
• D
  6% (2)

Explanation

Option A: When creating an image assessment policy, defining the severity levels to flag ensures that only vulnerabilities meeting the specified thresholds are flagged. This configuration allows the policy to effectively prioritize risks and generate actionable insights. Option B: Audit Mode is for runtime enforcement policies. Image assessment occurs during the CI/CD pipeline or image pull operations and is unrelated to runtime configurations. Option C: Real-time scanning is unrelated to image assessment policies, as it pertains to runtime protection. Image assessment focuses on pre-deployment scanning, not real-time monitoring. Option D: Image assessment policies apply to container images and are not limited to namespaces. Namespace-specific configurations are part of runtime or admission policies, not image assessment.

No community discussion yet for this question.