A development team is implementing a DevSecOps process. The security architect wants to ensure that container images are scanned for vulnerabilities before deployment to Azure Kubernetes Service (AKS). Which practice should the architect include?

Use Azure Key Vault to store container images.

Use Azure Policy to require a specific label on container images.

Run a vulnerability scan only on the AKS cluster after deployment.

Integrate Microsoft Defender for Containers into the CI/CD pipeline to scan images during build.

Microsoft Certified:Cybersecurity Architect Expert

Domain 1Objective 3

Design Solutions That Align with the Microsoft Cloud Adoption Framework for Azure (CAF) and the Azure Well-Architected Framework SC-100 Practice Questions (Page 9)

Part of the Design solutions that align with security best practices and priorities domain, which accounts for 20–25% of the SC-100 exam. Microsoft does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–20 in this domain), expect 3–7 from this objective — we provide 41 practice questions to prepare you well beyond it. (estimate)

41questions here

9free pages

7concepts

20–25%of the exam

7 Concepts in This Objective

Secure AI Adoption Strategy
CAF Security Strategy Evaluation
WAF Security Strategy Evaluation
CAF Security Recommendations
WAF Security Recommendations
Azure Landing Zones Security Design
DevSecOps Process Design

Questions 41–41

41application · medium
A development team is implementing a DevSecOps process. The security architect wants to ensure that container images are scanned for vulnerabilities before deployment to Azure Kubernetes Service (AKS). Which practice should the architect include?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to SC-100

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-100” is a trademark of its owner, used for identification only.

Design Solutions That Align with the Microsoft Cloud Adoption Framework for Azure (CAF) and the Azure Well-Architected Framework SC-100 Practice Questions (Page 9)

Questions 41–41

A development team is implementing a DevSecOps process. The security architect wants to ensure that container images are scanned for vulnerabilities before deployment to Azure Kubernetes Service (AKS). Which practice should the architect include?

Keep studying — Design solutions that align with security best practices and priorities