Which of the following is the correct method to obtain credentials from an approved container registry for image assessment in Falcon Cloud Security?

Question

Options

• AUse the CLI tool provided by the container registry to generate a service account token.
• BManually retrieve credentials from the Kubernetes Secret store.
• CEnable auto-login for the container registry using Docker Hub credentials.
• DDownload the credentials file from the Falcon Cloud Security dashboard.

• A
  93% (14)
• C
  7% (1)

Explanation

Option A: Most container registries, such as Amazon ECR, Google Container Registry (GCR), or Docker Hub, provide CLI tools or APIs to generate service account tokens for programmatic access. This is the standard way to securely retrieve credentials for integration with Falcon Cloud Option B: Manually retrieving credentials from Kubernetes Secrets is error-prone and may not comply with security best practices for accessing registries. Option C: Auto-login features like Docker's CLI-based credential storage are not suitable for enterprise-grade security and are not part of the approved procedure for image assessments. Option D: The Falcon Cloud Security dashboard does not provide registry credentials. Users must retrieve these credentials directly from the container registry.

No community discussion yet for this question.