2.4 Explain the Process of Container Registry Integration (e.g., JFrog, Docker, GitLab) CLOUD-SECURITY-ENGINEER Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is the recommended practice for credentials used in container registry integrations?

   • AUse the registry administrator's personal credentials
   • BStore credentials in plain text in the security platform configuration
   • CShare a single token across all integrations
   • DUse a dedicated service account with the minimum required permissions
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   How does an integrated registry enable image scanning?

   • AThe registry automatically patches vulnerabilities in images
   • BThe security platform installs an agent inside every container
   • CThe registry encrypts all images to prevent vulnerabilities
   • DThe security platform pulls image metadata and manifests to analyze for vulnerabilities
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A startup uses a mix of Docker Hub public images and a private JFrog Artifactory registry. They want a single view of all container images and their vulnerabilities across both sources. What is the primary benefit of integrating both registries with their cloud security platform?

   • AIt automatically migrates all public images to the private registry.
   • BIt speeds up the container build process by caching images locally.
   • CIt provides a centralized dashboard for image inventory and vulnerability management across all registries.
   • DIt eliminates the need for the developers to use Docker Hub directly.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A company has multiple container registries (Docker Hub, JFrog, GitLab) used by different teams. The security team wants to enforce a consistent security policy across all of them. What is the most effective way to achieve this?

   • AMigrate all images to a single registry to simplify management.
   • BCreate separate security policies for each registry and manage them independently.
   • CIntegrate all registries with a single cloud security platform and create a unified policy.
   • DUse a script to manually check each registry for vulnerabilities.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   An organization uses JFrog Artifactory with multiple repositories for different teams. The security team wants to integrate it with their cloud security platform but only wants to scan images from the 'team-a' repository, not 'team-b'. What is the most appropriate way to configure this?

   • AIntegrate only the 'team-a' repository URL, not the full Artifactory instance.
   • BIntegrate the entire Artifactory instance and then create a policy to ignore 'team-b' images.
   • CCreate a dedicated access token in Artifactory that only has read permission to the 'team-a' repository and use it for the integration.
   • DAsk the 'team-b' to move their images to a different registry.
   Reveal Solution Discussion Select an answer first