Machine-translated by Google. Questions are authored in English.
Top

Discussion

Consider the following statements about container image provenance.
1. Images should be scanned for known vulnerabilities before use.
2. Pinning to a digest rather than a mutable tag improves reproducibility.
3. A tag such as latest guarantees a specific image version.

  • A.All of them
  • B.1 and 2 only
  • C.3 only
  • D.1 only

Answer: B

Correct answer: 1 and 2 only

Statements 1 and 2 are sound practice: scanning catches known vulnerabilities before deployment, and pinning to an immutable digest guarantees that the same bytes are deployed every time. Statement 3 is the misconception the second addresses - a tag is a mutable pointer, and latest in particular is whatever was pushed most recently, so the same manifest can yield different images on different days.

No comment is present. Be the first to comment.
Loading…

Post your comment

Please log in or register to post a comment.