A retail company uses a mix of third-party and internally built container images. The security team wants a single assessment method that can identify known vulnerable packages, exposed secrets, and misconfigurations in the image configuration, all without executing the image. Which method should they choose?

Dynamic analysis by running the container and probing its open ports

Malware detonation in a sandbox with memory forensics

Runtime monitoring of the container after deployment

Static scanning of image layers and configuration files

CrowdStrikeCertified Cloud Specialist (CCCS)

Domain 4Objective 2

4.2 Given a Use Case, Recommend an Appropriate Image Assessment Method for Your Environment CCCS Practice Questions (Page 5)

Part of the Pre-Runtime Protection domain, which makes up ~16% of our current practice bank.

21questions here

5free pages

3concepts

Questions 21–21

21application · easy
A retail company uses a mix of third-party and internally built container images. The security team wants a single assessment method that can identify known vulnerable packages, exposed secrets, and misconfigurations in the image configuration, all without executing the image. Which method should they choose?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CCCS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CrowdStrike. “CCCS” is a trademark of its owner, used for identification only.

4.2 Given a Use Case, Recommend an Appropriate Image Assessment Method for Your Environment CCCS Practice Questions (Page 5)

Questions 21–21

Keep studying — Pre-Runtime Protection