While scanning a container image in the CrowdStrike Falcon platform, you need to identify all installed packages to verify their versions and check for vulnerabilities. Which approach provides the mos

Question

Options

• AUse a base image with fewer vulnerabilities and avoid scanning individual packages.
• BUse the ls command within a running container to list all files and infer installed packages.
• CManually inspect the Dockerfile used to build the container image.
• DLeverage the Falcon platform's image scanning feature to generate a software bill of materials

• A
  7% (2)
• B
  4% (1)
• C
  14% (4)
• D
  75% (21)

Explanation

Option A: Although choosing a secure base image is a good practice, it does not eliminate the need for scanning. Vulnerabilities can exist in dependencies or added packages beyond the base Option B: The ls command is not designed to provide package-specific information and is prone to errors. It cannot accurately determine installed package versions. Option C: The Dockerfile may not reflect the final state of the image, as additional packages could be installed during runtime or through indirect dependencies. Option D: The Falcon platform's scanning capability provides a detailed and accurate SBOM, including package names, versions, and associated vulnerabilities. This is the most efficient and reliable method.

No community discussion yet for this question.