Your company deploys applications in Docker containers. You want to detect known exploits in the Docker images used to provision the Docker containers. You need...
Microsoft AZ-400 Exam
Questions Number: 336 out of 535 Questions
62.80%
Question 336
Your company deploys applications in Docker containers. You want to detect known exploits in the Docker images used to provision the Docker containers. You need to integrate image scanning into the application lifecycle. The solution must expose the exploits as early as possible during the application lifecycle. What should you configure?
You can use the Docker task to sign into ACR and then use a subsequent script to pull an image and scan the container image for vulnerabilities. Use the docker task in a build or release pipeline. This task can be used with Docker or Azure Container registry. Incorrect Answers: C: We should not wait until deployment. We want to detect the exploits as early as possible. D: We should wait until the image is in the product container. We want to detect the exploits as early as possible. Reference: https://docs.microsoft.com/en-us/azure/devops/articles/security-validation-cicd-pipeline?view=vsts
