What are two valid image identifiers to designate trust? (Choose two.)

Question

Options

• Arepo
• Btrusted publisher
• Cregistry
• Dbase layer

• A
  9% (5)
• B
  88% (51)
• D
  3% (2)

Explanation

In container image trust frameworks (such as Docker Content Trust or similar systems), trust can be designated at the trusted publisher level - meaning images are vouched for by a verified organization or vendor - and at the registry level, meaning all images sourced from a specific registry are considered trusted. These two identifiers represent the entities responsible for image integrity and provenance.

Why the others are wrong:

• A. repo - A repository is part of an image's address (e.g., nginx), but it is not itself a trust designation category; trust is scoped to higher-level entities like the publisher or registry.
• D. base layer - A base layer is a structural component within an image, not an identifier used to establish or designate trust at the distribution level.

Memory tip: Think of trust as flowing from who provides the image (publisher) and where it comes from (registry) - both are sources you can vet. Repos and layers are parts of images, not trust anchors.

No community discussion yet for this question.