4.2 Given a Use Case, Recommend an Appropriate Image Assessment Method for Your Environment CCCS Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which image assessment method involves executing a container image in a controlled environment to observe its runtime behavior?

   • ADynamic analysis
   • BMalware detonation
   • CSignature-based scanning
   • DStatic scanning
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   An organization needs to detect zero-day malware in container images before deployment. Which method is most appropriate for this use case?

   • AStatic scanning
   • BSignature-based scanning
   • CDynamic analysis
   • DConfiguration review
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A gaming company releases new container images every hour during a product launch. The security team wants to catch known malware and vulnerable dependencies before images reach the production cluster. The company has a small security team and cannot afford to manually review every image. Which image assessment approach is most appropriate?

   • AAutomated static scanning integrated into the CI/CD pipeline with a block on critical findings
   • BA quarterly batch scan of all images in the registry
   • CManual malware detonation of each image by the security team before release
   • DDynamic analysis of images only after they are deployed to production
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A DevOps team wants to add image assessment to their existing CI/CD pipeline with minimal changes. The team currently uses a popular container registry and wants to catch known vulnerabilities before images are promoted to production. Which method integrates most easily with the existing registry workflow?

   • AManually trigger a scan from the registry web console for each image
   • BEnable the registry's built-in static scanning feature on push
   • CUse a third-party scanner that requires images to be exported and re-imported
   • DCreate a separate pipeline stage that runs malware detonation on every image
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   An organization has a high-volume CI/CD pipeline that builds images frequently. They need an assessment method that does not significantly slow down the pipeline. Which environmental factor is most relevant to this constraint?

   • AData residency
   • BOperational constraints
   • CThreat model
   • DCompliance requirements
   Reveal Solution Discussion Select an answer first