3V0-24.25: VMware Certified Advanced Professional - vSphere Kubernetes Service

By Broadcom · Question Mode

QuestionQ8

VerifiedSection 2 - VMware Products and Solutions

An administrator operates several critical workloads on vSphere Kubernetes Services. An audit found an outdated container image containing a known CVE that exposed internal APIs to unauthorized access. To mitigate this risk and strengthen image security, the administrator enabled Harbor as a Supervisor Service.

Which two Harbor registry capabilities help the organization avoid a recurrence of this type of security incident?

Choose two
Explanation

Harbor scans container images for known vulnerabilities, including CVEs, and can apply policies that prevent vulnerable images from being deployed. Harbor also supports image signing and content-trust policies, which verify image authenticity and provenance and can block unsigned images. Together, these capabilities reduce the risk of deploying vulnerable or untrusted container images.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!