Artifact Repository and Image Security KCSA Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Why is an artifact repository important for security in a cloud native environment?

   • AIt provides a central point to enforce access controls and scan artifacts for vulnerabilities
   • BIt replaces the need for runtime security monitoring
   • CIt automatically patches all vulnerabilities in stored images
   • DIt encrypts all network traffic in the cluster
   Reveal Solution Discussion Select an answer first
2. 7expert · medium

   A company has a strict compliance requirement: no image with a known critical vulnerability may be deployed. They also need to minimize deployment delays. Which scanning strategy best balances these requirements?

   • AScan images only after deployment and alert the security team.
   • BScan images in the CI pipeline and fail the build on critical vulnerabilities, while allowing medium and low to pass.
   • CBlock all images that have any vulnerability, regardless of severity.
   • DScan images manually before each release and approve them in a meeting.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A development team wants to integrate vulnerability scanning into their CI/CD pipeline so that images are scanned before being pushed to the production repository. Which step should they add to the pipeline?

   • AManually review the Dockerfile for known vulnerable packages before pushing.
   • BRun a scanner against the built image and fail the pipeline if vulnerabilities above a threshold are found.
   • CScan the source code with a static analysis tool and publish the results.
   • DPush the image to the repository and rely on the registry's built-in scanning to alert later.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which measure is used to prevent unauthorized access to an artifact repository?

   • AStoring images in a single shared namespace for all teams
   • BMaking the repository public to increase transparency
   • CImplementing role-based access control (RBAC) for repository users
   • DDisabling all authentication to simplify access
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is the primary role of an artifact repository in the cloud native lifecycle?

   • ATo provide a network firewall for container clusters
   • BTo store and manage container images and other build artifacts in a centralized location
   • CTo execute container images in a production environment
   • DTo compile source code into executable binaries
   Reveal Solution Discussion Select an answer first