2.4 Explain the Process of Container Registry Integration (e.g., JFrog, Docker, GitLab) CLOUD-SECURITY-ENGINEER Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   When integrating a private Docker registry, what information is typically needed by the security platform?

   • AThe Docker daemon configuration file from each host
   • BThe IP addresses of all containers running from the registry
   • CThe Docker Hub username and password of the registry owner
   • DThe registry URL and credentials with read access
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which access control is typically applied to the security platform's integration with a container registry?

   • AFull administrative access to the registry
   • BWrite access to push new images
   • CDelete access to remove vulnerable images
   • DRead-only access to image metadata and manifests
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A large enterprise uses JFrog Artifactory as its central container registry. The security team has integrated it with their cloud security platform and enabled scanning. They now want to enforce a policy that blocks the deployment of any image with a critical vulnerability, but they are concerned about the performance impact of scanning every image on every deployment. What is the most effective way to balance security and performance?

   • AScan images only on a weekly basis and use the results for policy enforcement.
   • BScan images only when they are deployed, accepting the performance hit on the critical deployment path.
   • CEnable continuous scanning in the platform so images are scanned when pushed, and the policy uses the latest scan results at deployment time.
   • DDisable scanning and rely on the developers to manually check for vulnerabilities.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is a typical policy enforcement action that can result from scanning an image in an integrated registry?

   • AMoving the image to a quarantine network
   • BDeleting the image from the registry without notification
   • CAutomatically rewriting the image to remove vulnerabilities
   • DBlocking the image from being deployed if it fails policy checks
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A software company uses GitLab CI/CD to build and push container images to the GitLab Container Registry. The security team needs to integrate this registry with their cloud security platform to scan images. The GitLab instance is hosted on-premises and requires authentication. What is the first step the security engineer should take?

   • ACreate a new project in GitLab to store the integration configuration.
   • BDisable GitLab's built-in authentication to allow the platform to connect.
   • CGenerate a personal access token or deploy token in GitLab with read access to the container registry.
   • DInstall a plugin on the GitLab server to export image data.
   Reveal Solution Discussion Select an answer first