You are compiling a compliance report on vulnerability metadata for a specific set of images identified by Artifact Analysis. Metadata from images scanned more than 30 days ago are missing from the…

Question

Options

• ACreate a Pub/Sub subscription to pull from Artifact Analysis topics.
• BCheck Artifact Analysis storage buckets in Cloud Storage.
• CPush or pull the images from Artifact Registry.
• DCheck Cloud Trace logs for Artifact Analysis findings.

• A
  15% (3)
• B
  5% (1)
• C
  75% (15)
• D
  5% (1)

Explanation

Artifact Analysis (formerly Container Analysis) automatically scans images for vulnerabilities when they are pushed to or pulled from Artifact Registry. However, vulnerability metadata is not retained indefinitely-scan results for images that have not been interacted with for more than 30 days may expire or be purged. The solution is to push or pull the affected images from Artifact Registry, which triggers a fresh vulnerability scan and regenerates the metadata. Option A (Pub/Sub subscription) receives real-time scan event notifications but cannot retrieve historical or expired metadata. Option B is incorrect because Artifact Analysis does not expose its findings via user-accessible Cloud Storage buckets. Option D (Cloud Trace logs) records distributed tracing data for application performance, not vulnerability scan findings from Artifact Analysis.

No community discussion yet for this question.