Why would a security team use an exclusion in an image assessment policy?

To ensure that all images are scanned at the same time

To bypass security controls for all images in the registry

To ignore a known vulnerability that is not exploitable in the current environment

To speed up the scanning process by scanning fewer files

A company has a legacy image that is used only for internal reporting and contains a high-severity vulnerability that is not accessible from the internet. What exclusion is most appropriate?

Exclude the entire image from scanning

Do not exclude anything; block the image from deployment

Exclude the vulnerability for all environments because it is not internet-facing

Exclude the vulnerability only in production

A team wants to maintain a strict security posture while allowing a specific image with a known low-risk vulnerability to be deployed. What is the best approach to balance policy and exclusions?

Exclude the vulnerability for all environments without documentation

Exclude the vulnerability only for the specific image and environment, with a documented justification and review date

Do not use exclusions; block the image entirely

Exclude all vulnerabilities in the image to ensure it can be deployed anywhere

In cloud security, an image assessment policy is used to:

Enforce runtime behavior rules on containers

Encrypt images at rest in the container registry

Scan images for vulnerabilities, malware, and compliance violations

Automatically quarantine compromised workloads

What is the purpose of exclusions in an image assessment policy?

To increase the frequency of scans for high-risk images

To permanently disable all security scanning for the entire organization

To allow certain images or vulnerabilities to be ignored based on defined criteria

To automatically delete images that fail the assessment

CrowdStrikeCertified Cloud Specialist (CCCS)

Domain 3Objective 2

3.2 Given a Use Case, Recommend an Image Assessment Policy and Exclusions CCCS Practice Questions (Page 3)

Part of the Cloud Security Policies and Rules domain, which makes up ~11% of our current practice bank.

18questions here

4free pages

6concepts

Questions 11–15

11foundation · easy
Why would a security team use an exclusion in an image assessment policy?
Select an answer first
12foundation · easy
A company has a legacy image that is used only for internal reporting and contains a high-severity vulnerability that is not accessible from the internet. What exclusion is most appropriate?
Select an answer first
13foundation · easy
A team wants to maintain a strict security posture while allowing a specific image with a known low-risk vulnerability to be deployed. What is the best approach to balance policy and exclusions?
Select an answer first
14foundation · easy
In cloud security, an image assessment policy is used to:
Select an answer first
15foundation · easy
What is the purpose of exclusions in an image assessment policy?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCCS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CrowdStrike. “CCCS” is a trademark of its owner, used for identification only.