CCSP Cloud Platform and Infrastructure Security Practice Question
Which of the following is a primary benefit of using immutable tags for container images in a production registry?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Consistent and reproducible deployments
Immutable tags prevent accidental overwriting of image tags, ensuring that the same tag always refers to the same image, which aids in traceability and rollback.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Improved build performance
Why it's wrong here
Immutable tags address artefact integrity and reproducibility, not build speed; the build process and layer caching determine how long an image takes to build. Build performance is tempting because caching seems related to tagging, but immutability is the correct choice when the requirement is guaranteeing that a given tag always resolves to the same digest.
- ✗
Automatic vulnerability scanning
Why it's wrong here
Immutable tags pin a digest so the same tag cannot be overwritten, which supports reproducibility and supply-chain integrity; they do not trigger or perform any scanning. Vulnerability scanning is delivered by registry image scanning features or CI pipeline scanners, and would be the answer if the question asked how to detect known CVEs in pushed images.
- ✓
Consistent and reproducible deployments
Why this is correct
Immutable tags map a fixed tag to one digest, so every deployment pulls byte-identical content. This eliminates drift between environments and gives the consistent, reproducible deployments the stem asks for, unlike mutable tags that can be overwritten silently.
- ✗
Reduced storage cost
Why it's wrong here
Immutability prevents a tag from being overwritten, so it guarantees traceability and reproducible deployments rather than affecting registry storage consumption. Storage cost is driven by the number and size of stored layers, not by tag naming. Immutable tags would be the right control when the requirement is preventing tag mutation or supply-chain tampering.
Go deeper
Related to this question
About these practice questions
Courseiva writes every CCSP question from scratch — 934 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CCSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CCSP exam.