To ensure CrowdStrike can perform uninterrupted image assessments, which of the following steps must you take when adding CrowdStrike IP addresses to your container registry allowlist?

Question

Options

• AAdd the IP addresses of CrowdStrike's regional data centers.
• BAdd IP addresses from the organization's internal network.
• CAdd CrowdStrike IP addresses to the denylist of your firewall for enhanced security.
• DAdd the CrowdStrike IP addresses provided in the CrowdStrike Console.

• A
  3% (1)
• C
  3% (1)
• D
  93% (28)

Explanation

Option A: This is incorrect because CrowdStrike's IP addresses for image assessment are distinct from general regional data center IPs. Using only regional data center IPs will not enable the image assessment functionality. Option B: This is incorrect because CrowdStrike services require external IP addresses for communication. Internal IP addresses are irrelevant to enabling CrowdStrike's image assessment Option C: This is incorrect because adding CrowdStrike IP addresses to the denylist would block their access, making image assessments impossible. Allowlisting is the correct approach. Option D: This is correct because CrowdStrike publishes specific IP addresses that its services use to communicate with container registries for image assessments. These IP addresses must be added to the allowlist of the container registry to permit scanning activities without interruption.

No community discussion yet for this question.