LFCA: Linux Foundation Certified IT Associate

By Linux Foundation · Question Mode

QuestionQ111

VerifiedSecurity Fundamentals

A developer must find an appropriate container image for the new application their team is building. Which of the following is a best practice for verifying the security of the container image?

Explanation

Scanning a container image with a security tool identifies known vulnerabilities, such as CVEs in its packages and dependencies, so they can be assessed and remediated before deployment. Docker documentation describes regular image vulnerability scanning as an important part of vulnerability management.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!