You are tasked with manually scanning container images for vulnerabilities using the CrowdStrike Falcon command-line tool. Which command correctly initiates the scan?

Question

Options

• Afalcon container-scan --registry <registry_url> --image <image_tag>
• Bfalconctl scan --type image --file <image_file>
• Cfalconctl image-scan --scan-path <path_to_image>
• Dfalcon image-scan --repository <repository_url> --image <image_tag>

• A
  8% (2)
• C
  4% (1)
• D
  88% (22)

Explanation

Option A: The falcon container-scan command is not a valid command in the CrowdStrike Falcon CLI. The correct command for scanning images is falcon image-scan. Option B: The falconctl command is used for managing endpoint agents, not for scanning container images. The --type image and --file flags are not valid in this context. Option C: While falconctl is a valid tool, the --scan-path flag and image-scan subcommand do not exist. Image scanning requires specifying the repository and image tag, not a file path. Option D: This command follows the proper syntax to manually scan container images using the CrowdStrike Falcon command-line tool. It specifies the repository URL and image tag, which are required parameters for the scan.

No community discussion yet for this question.