Which of the following best describes the process of identifying unassessed images in production using CrowdStrike Falcon?

Question

Options

• AUse the Falcon console to generate a report from the Image Assessment dashboard.
• BDeploy a custom script to parse container logs for unassessed image information.
• CConfigure the runtime protection policy to block all unassessed images from running.
• DEnable auto-deletion of unassessed images directly from the Falcon console.

• A
  72% (36)
• B
  16% (8)
• C
  8% (4)
• D
  4% (2)

Explanation

Option A: The Falcon console includes an Image Assessment dashboard that provides a comprehensive overview of container images in use, including identifying those that have not been scanned. This report helps teams address security gaps proactively. Option B: While custom scripts might extract relevant details, the Falcon console already provides built-in tools to identify unassessed images more efficiently and accurately. Option C: Runtime protection policies can prevent the execution of specific images based on policies, but they do not inherently identify or block all unassessed images automatically. Identification requires analysis via the Image Assessment dashboard. Option D: The Falcon console does not offer an auto-deletion feature for unassessed images. Actions related to unassessed images require manual intervention or automated workflows outside of Falcon.

No community discussion yet for this question.