A government contractor must comply with a strict security framework that requires all container images to be assessed and any high-severity vulnerability to be remediated or formally accepted. They have a legacy image that contains a high-severity vulnerability in a component that is not accessible from the network. The team wants to deploy this image to meet a contract milestone. What is the best approach?

Exclude the entire image from assessment to avoid the issue.

Lower the assessment threshold to ignore high-severity vulnerabilities.

Create an exclusion for the specific vulnerability with formal risk acceptance documentation, as allowed by the framework.

Deploy the image without an exclusion, relying on the fact that the component is not network-accessible.

When recommending an image assessment policy, which of the following is a key factor to consider?

The environment type (e.g., production vs. development)

The color scheme of the application UI

The number of images in the registry

A technology company uses a base image that is shared across many applications. The base image has a vulnerability that is not exploitable in the context of any of the applications. The team wants to avoid repeated alerts for the same issue. What is the most efficient exclusion strategy?

Create an exclusion for the specific vulnerability on the base image, which will apply to all derived images.

Lower the assessment threshold to ignore the severity of this vulnerability.

Create individual exclusions for each application image that uses the base image.

Exclude the base image from assessment entirely.

CrowdStrikeCertified Cloud Specialist (CCCS)

Domain 3Objective 2

3.2 Given a Use Case, Recommend an Image Assessment Policy and Exclusions CCCS Practice Questions (Page 4)

Part of the Cloud Security Policies and Rules domain, which makes up ~11% of our current practice bank.

18questions here

4free pages

6concepts

Questions 16–18

16expert · hard
A government contractor must comply with a strict security framework that requires all container images to be assessed and any high-severity vulnerability to be remediated or formally accepted. They have a legacy image that contains a high-severity vulnerability in a component that is not accessible from the network. The team wants to deploy this image to meet a contract milestone. What is the best approach?
Select an answer first
17foundation · easy
When recommending an image assessment policy, which of the following is a key factor to consider?
Select an answer first
18application · medium
A technology company uses a base image that is shared across many applications. The base image has a vulnerability that is not exploitable in the context of any of the applications. The team wants to avoid repeated alerts for the same issue. What is the most efficient exclusion strategy?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CCCS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CrowdStrike. “CCCS” is a trademark of its owner, used for identification only.

3.2 Given a Use Case, Recommend an Image Assessment Policy and Exclusions CCCS Practice Questions (Page 4)

Questions 16–18

When recommending an image assessment policy, which of the following is a key factor to consider?

A technology company uses a base image that is shared across many applications. The base image has a vulnerability that is not exploitable in the context of any of the applications. The team wants to avoid repeated alerts for the same issue. What is the most efficient exclusion strategy?

Keep studying — Cloud Security Policies and Rules