DCA · Question #12
Wha is the purpose of Docker Content Trust?
The correct answer is A. Signing and verification of image tags. Docker Content Trust (DCT) ensures the integrity and authenticity of Docker images by enabling cryptographic signing and verification of image tags.
Question
Wha is the purpose of Docker Content Trust?
Options
- ASigning and verification of image tags
- BEnabling mutual TLS between the Docker client and server
- CDocker registry TLS verification and encryption
- DIndicating an image on Docker Hub is an official image
How the community answered
(40 responses)- A90% (36)
- B3% (1)
- C5% (2)
- D3% (1)
Why each option
Docker Content Trust (DCT) ensures the integrity and authenticity of Docker images by enabling cryptographic signing and verification of image tags.
Docker Content Trust uses digital signatures to verify the publishers of images and ensure that the images have not been tampered with since they were published. This feature specifically focuses on signing and verifying image tags to establish trust in the origin and integrity of image content.
Mutual TLS is for client-server authentication and encryption of the communication channel, which is a general security practice distinct from content signing.
TLS verification and encryption for registry communication secure the transport layer, but do not provide guarantees about the integrity of the image content itself or its origin.
While official images are trusted, Docker Content Trust provides a cryptographic mechanism for trust for any image, not just an indicator for official images on Docker Hub.
Concept tested: Docker Content Trust purpose
Source: https://docs.docker.com/engine/security/trust/content_trust/
Topics
Community Discussion
No community discussion yet for this question.