2.4 Explain the Process of Container Registry Integration (e.g., JFrog, Docker, GitLab) CLOUD-SECURITY-ENGINEER Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A company uses a private Docker registry that is only accessible from within their corporate network. They have integrated it with their cloud security platform, which is hosted in the cloud. The integration is failing because the platform cannot reach the registry. What is the most likely cause and solution?

   • AThe credentials used for the integration are incorrect; the engineer should regenerate the token.
   • BThe registry is not publicly accessible; the engineer needs to set up a secure connection, such as a VPN or proxy, for the platform to reach it.
   • CThe registry does not support the required API version; the engineer should upgrade the registry.
   • DThe cloud security platform does not support private Docker registries; the engineer should use a different platform.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the primary purpose of integrating a container registry with a cloud security platform?

   • ATo replace the registry's native access control with the security platform's identity system
   • BTo automatically deploy containers from the registry to production clusters
   • CTo enable security scanning and policy enforcement on container images before they are deployed
   • DTo store container images in a separate backup location managed by the security platform
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A development team uses JFrog Artifactory as their private container registry. Security policies require that only images from the 'prod-ready' repository can be deployed to the production Kubernetes cluster. The security team wants to enforce this automatically when developers push images. What should the security engineer configure in the cloud security platform?

   • AIntegrate Artifactory as a registry, then create a policy that blocks deployment of images not sourced from the 'prod-ready' repository.
   • BIntegrate the production Kubernetes cluster directly with Artifactory, bypassing the cloud security platform.
   • CSet up a webhook in Artifactory to notify the security team when a push occurs to any repository.
   • DConfigure Artifactory to only allow pushes to the 'prod-ready' repository by using access tokens.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What does image synchronization in a GitLab Container Registry integration refer to?

   • ACopying images from GitLab to the security platform for analysis
   • BAligning the registry's clock with the security platform's time server
   • CReplicating GitLab repositories to a backup server
   • DMerging multiple GitLab registries into one
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A company uses Docker Hub for some public base images and a private Docker registry for their custom applications. They want to ensure that their custom application images are scanned for vulnerabilities before they are deployed. What is the most efficient way to set this up?

   • AIntegrate only the private Docker registry with the cloud security platform and enable scanning.
   • BManually download each custom image and run a local scanner.
   • CIntegrate Docker Hub and the private registry, but only scan the private registry.
   • DConfigure the private registry to push all images to Docker Hub for scanning.
   Reveal Solution Discussion Select an answer first