In a DevSecOps pipeline, what is the primary purpose of integrating Cisco Secure Registry (if using Cisco Container Platform) or a similar container scanning tool?
Trap 1: Optimize container performance
This is a secondary benefit, not the security goal.
Trap 2: Scale container instances
This is an orchestration task.
Trap 3: Manage container networking
This is handled by the CNI plugin.
- A
Optimize container performance
Why wrong: This is a secondary benefit, not the security goal.
- B
Scale container instances
Why wrong: This is an orchestration task.
- C
Identify vulnerabilities in container images
Automated scanning detects known CVEs in container layers.
- D
Manage container networking
Why wrong: This is handled by the CNI plugin.