You are using the CrowdStrike Falcon platform to review a container image for vulnerabilities. During the analysis, the platform identifies a critical vulnerability in one of the installed packages. W

Question

Options

• ADeploy the container image as-is but monitor it closely for suspicious activity.
• BImmediately delete the container image and rebuild it from scratch.
• CUpgrade the vulnerable package to a non-vulnerable version and re-scan the image.
• DReport the vulnerability to the development team and delay addressing it until the next release

• A
  8% (2)
• B
  4% (1)
• C
  85% (22)
• D
  4% (1)

Explanation

Option A: Monitoring does not address the root cause and leaves the system vulnerable to Prevention is better than detection in this context. Option B: This approach may ensure a fresh start, but it is unnecessarily drastic and inefficient. Upgrading the vulnerable package within the existing image is typically sufficient and more Option C: This is the recommended practice for addressing vulnerabilities. Updating the specific package ensures the image is secure while maintaining functionality. Re-scanning verifies the vulnerability is resolved. Option D: Postponing mitigation can leave your systems exposed to security risks. Critical vulnerabilities should be addressed immediately.

No community discussion yet for this question.