4.1 Add, Edit and Delete Registry Connection Details and Settings CCCS Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   An analyst is adding a registry connection for a registry that requires a username and password. The analyst wants to ensure the credentials are stored securely. What is the best practice when entering the credentials?

   • AUse a dedicated service account with minimal permissions
   • BStore the password in a shared document for the team
   • CUse a personal admin account for simplicity
   • DUse the same credentials as the cloud provider account
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A DevOps team uses a shared container registry for multiple projects. The security team wants to integrate this registry with CrowdStrike to automatically scan images. The registry uses OAuth 2.0 for authentication, and the team has a client ID and client secret. When adding the registry connection in the CrowdStrike console, what should the analyst select as the authentication type?

   • AOAuth 2.0
   • BAPI key
   • CAnonymous access
   • DBasic authentication
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   An organization is adding a new registry connection for a registry that uses a self-signed certificate. The analyst is concerned that the connection might fail due to certificate validation. What should the analyst do to ensure the connection is established?

   • AIncrease the polling interval
   • BConfigure the connection to skip certificate validation
   • CUse the registry's IP address instead of the hostname
   • DUse a different authentication type
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which step is part of editing a registry connection in CrowdStrike?

   • ACreate a new connection with the same name
   • BRemove the connection and add it again
   • CDisable the connection and enable it again
   • DSelect the connection and modify its settings
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A registry connection is no longer needed, but the analyst notices that a scan policy is still referencing it. What should the analyst do before deleting the connection?

   • AUpdate or remove the scan policy that references the connection
   • BDelete the connection anyway and fix the policy later
   • CChange the authentication type of the connection
   • DDisable the connection instead of deleting it
   Reveal Solution Discussion Select an answer first