A security team requires that all images pushed to the production registry are scanned for vulnerabilities before deployment. The team uses a CI pipeline that builds images and pushes them to a private registry. Which approach best ensures that only scanned images are deployed?

Use the latest base image and assume it is secure without scanning

Run a vulnerability scanner in the CI pipeline after building the image and before pushing it to the registry

Scan images after they are pushed to the registry and manually approve them for deployment

Scan the Dockerfile for vulnerabilities instead of the built image

CiscoCertified DevNet Professional

Domain 4Objective 4

Utilize Docker to Containerize an Application 350-901 Practice Questions (Page 4)

Part of the 4.0 Application Deployment and Security domain, which accounts for 20% of the 350-901 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–1 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

10concepts

20%of the exam

Questions 16–20

16foundation · easy
Which Docker network driver is used to connect containers across multiple Docker hosts in a Swarm?
Select an answer first
17expert · hard
A security team requires that all images pushed to the production registry are scanned for vulnerabilities before deployment. The team uses a CI pipeline that builds images and pushes them to a private registry. Which approach best ensures that only scanned images are deployed?
Select an answer first
18foundation · easy
Which Dockerfile instruction sets an environment variable that is available at runtime?
Select an answer first
19foundation · easy
Which Dockerfile instruction is commonly used to run a container as a non-root user?
Select an answer first
20foundation · easy
Which docker run option makes the container's filesystem read-only?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-901

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-901” is a trademark of its owner, used for identification only.

Utilize Docker to Containerize an Application 350-901 Practice Questions (Page 4)

Questions 16–20

Which Docker network driver is used to connect containers across multiple Docker hosts in a Swarm?

A security team requires that all images pushed to the production registry are scanned for vulnerabilities before deployment. The team uses a CI pipeline that builds images and pushes them to a private registry. Which approach best ensures that only scanned images are deployed?

Which Dockerfile instruction sets an environment variable that is available at runtime?

Which Dockerfile instruction is commonly used to run a container as a non-root user?

Which docker run option makes the container's filesystem read-only?

Keep studying — 4.0 Application Deployment and Security