NSE7_PBC-7.2 · Question #66
Refer to the exhibit. The exhibit shows the results of a FortiCNP registry scan. Which two statements are correct? (Choose two )
The correct answer is A. When adding a repository, you can leave the Tag section blank to scan all images- C. The registry scan is part of the FortiCNP container protection. The exhibit shows the results of a FortiCNP registry scan, which is part of the FortiCNP container protection. FortiCNP's Container Protection provides deep visibility into the security posture of container registries and images. The registry scan utilizes Common…
Question
Refer to the exhibit. The exhibit shows the results of a FortiCNP registry scan. Which two statements are correct? (Choose two )
Exhibit
Options
- AWhen adding a repository, you can leave the Tag section blank to scan all images-
- BThe registry scan is part of the FortiCNP cloud protection.
- CThe registry scan is part of the FortiCNP container protection.
- DWhen adding a repository, you can add a minimum number of images to be imported through
How the community answered
(15 responses)- A80% (12)
- B7% (1)
- D13% (2)
Explanation
The exhibit shows the results of a FortiCNP registry scan, which is part of the FortiCNP container protection. FortiCNP's Container Protection provides deep visibility into the security posture of container registries and images. The registry scan utilizes Common Vulnerabilities and Exposures (CVE) index regularly updated by NVD to detect underlying vulnerabilities, security flaws, and provides security best practices. The registry scan is performed at the registry level, and it can scan all images in a repository if the Tag section is left blank when adding a repository. The CAP section stands for Container Assurance Policy, which defines the minimum number of images to be scanned per repository.
Topics
Community Discussion
No community discussion yet for this question.
