While using Falcon's Image Assessment feature, you want to prioritize scanning images for critical vulnerabilities before deployment. Which configuration option should you use to achieve this goal?

Question

Options

• AAdjust the Scan Scope in Image Assessment to include all images but only flag vulnerabilities with
• BSet the Scan Rule in Cloud Workload Protection to include only images with high CVSS scores
• CEnable Real-Time Scan Prioritization in the registry integration settings to target critical
• DUse the Image Scan Priority feature in Falcon's Prevention Policies to focus on high-severity

• A
  3% (1)
• B
  75% (24)
• C
  13% (4)
• D
  9% (3)

Explanation

Option A: The "Scan Scope" term is not used in Falcon. While filtering by CVSS score is valid, the configuration should be done via scan rules. Option B: Configuring scan rules based on CVSS scores enables prioritization of critical vulnerabilities during image scanning. Option C: Real-time prioritization is not an available feature for Falcon's registry integrations. Scanning rules are applied during policy configuration. Option D: "Image Scan Priority" is not part of Prevention Policies. Image Assessment configuration occurs within Cloud Workload Protection.

No community discussion yet for this question.