2.4 Explain the Process of Container Registry Integration (e.g., JFrog, Docker, GitLab) CLOUD-SECURITY-ENGINEER Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A security engineer is integrating JFrog Artifactory with their cloud security platform. The Artifactory instance is configured with SSO. What type of credential should the engineer use for the integration to ensure it works without being affected by user password changes?

   • AA dedicated service account with a non-expiring access token.
   • BThe personal access token of the security engineer.
   • CThe SSO administrator's username and password.
   • DA read-only API key generated from the Artifactory admin console.
   Reveal Solution Discussion Select an answer first
2. 22expert · hard · select all that apply

   A security engineer is configuring integrations for both JFrog Artifactory and GitLab Container Registry. Which of the following are best practices for authentication and access control? (Select all that apply.)

   • AStore the integration credentials in a shared document for easy access by the team.
   • BUse a single admin token for all integrations to simplify management.
   • CGrant the integration the minimum permissions required, such as read-only access to the registry.
   • DUse dedicated service accounts with tokens instead of personal user accounts.
   • ERotate the integration tokens periodically to reduce the risk of compromised credentials.
   Check answers Discussion Select an answer first
4. 23application · medium

   A company runs a private Docker registry (Harbor) for internal images. The security team wants to ensure that any image containing a critical vulnerability is not run in their environment. They have integrated Harbor with their cloud security platform. What is the most effective way to achieve this?

   • AManually review the vulnerability report for each image before it is deployed.
   • BConfigure Harbor to automatically delete any image with a critical vulnerability.
   • CSet up a cron job to run a vulnerability scanner against the registry and email the results.
   • DEnable continuous image scanning in the platform and create a policy to block the deployment of images with critical vulnerabilities.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which benefit is directly gained by integrating a container registry with a security platform?

   • AThe registry's storage capacity is increased
   • BSecurity teams gain visibility into image vulnerabilities and compliance status
   • CImages are automatically converted to a more secure format
   • DNetwork traffic between containers is encrypted automatically
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   Which authentication method is commonly used when integrating GitLab Container Registry with a security platform?

   • APersonal access token or CI/CD job token
   • BOAuth client secret from a third-party identity provider
   • CX.509 client certificate
   • DSSH key pair
   Reveal Solution Discussion Select an answer first