The security team wants to exclude a specific container image from being assessed by Falcon's image assessment policy. Which of the following steps should they take to configure this exclusion?

Question

Options

• AConfigure an exception for the image repository in the Falcon runtime policies.
• BAdd the image digest to the allowlist under image assessment exclusions.
• CAdd the container image tag to the policy exclusion list.
• DApply a "Do Not Scan" label to the container in Kubernetes.

• A
  4% (1)
• B
  93% (25)
• C
  4% (1)

Explanation

Option A: Runtime policies address runtime behavior and do not affect pre-deployment image Option B: Excluding an image from the image assessment policy requires adding its immutable digest to the allowlist. This ensures that the specific image is excluded from assessment while maintaining security for other images in the registry. Option C: Tags are mutable and can point to different image versions over time. Exclusions based on tags are not reliable for security purposes. Option D: Kubernetes labels do not control Falcon's image assessment policies. Exclusions are configured within the Falcon Cloud platform, not at the Kubernetes level.

No community discussion yet for this question.