Palo Alto Networks Exam PSE-StrataDC Topic 1 Question 76 Discussion

Actual exam question for Palo Alto Networks's PSE-StrataDC exam

Question #: 76
Topic #: 1

[All PSE-StrataDC Questions]

Is vulnerability analysis against images in the registry sufficient for security?

AYes, containers do not have unique vulnerabilities.

BNo, you should do vulnerability analysis only against the running containers, which are vulnerable.

CYes, you are ensuring that the images the containers are based on are secure.

DNo, you need to do analysis in the CI system, in the registry, and against instantiated containers

Show Suggested Answer

Suggested Answer: C

by Shaunna at Dec 06, 2024, 03:04 AM

Limited Time Offer

25%

Off

Get Premium PSE-StrataDC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Vallie

5 months ago

Option B is a bit of a head-scratcher. Why would you only analyze the running containers? Gotta start with the images, that's the foundation.

upvoted 0 times

Geoffrey

4 months ago

D) No, you need to do analysis in the CI system, in the registry, and against instantiated containers

upvoted 0 times

...

Gussie

5 months ago

C) Yes, you are ensuring that the images the containers are based on are secure.

upvoted 0 times

...

Mabel

5 months ago

A) Yes, containers do not have unique vulnerabilities.

upvoted 0 times

...

Annabelle

5 months ago

I believe we need to do analysis in the CI system, registry, and against instantiated containers for comprehensive security.

upvoted 0 times

...

Louvenia

5 months ago

But by analyzing the images, we are ensuring the containers are based on secure images.

upvoted 0 times

...

Bernadine

5 months ago

I'm going with option D. You can't just rely on the registry, gotta check those running containers too. Don't want any surprises popping up in production!

upvoted 0 times

Felice

4 months ago

I see your point, but option A suggests containers don't have unique vulnerabilities.

upvoted 0 times

...

Adelle

5 months ago

I'm leaning towards option B, focusing on the running containers seems more practical.

upvoted 0 times

...

Jesusa

5 months ago

I think option C is enough, as long as the images are secure, the containers should be too.

upvoted 0 times

...

Bernardo

5 months ago

I agree, option D covers all the bases for security.

upvoted 0 times

...

Skye

6 months ago

Hah, option A is a real knee-slapper. Containers definitely have their own unique vulnerabilities, can't just assume the images are safe.

upvoted 0 times

Ryann

5 months ago

Option B) No, you should do vulnerability analysis only against the running containers, which are vulnerable.

upvoted 0 times

...

Art

5 months ago

Option A) Yes, containers do not have unique vulnerabilities.

upvoted 0 times

...

Torie

6 months ago

I disagree, you should do vulnerability analysis only against the running containers.

upvoted 0 times

...

Leeann

6 months ago

Option C sounds like the right choice. If the images are secure, then the containers should be secure too.

upvoted 0 times

...

Louvenia

6 months ago

I think vulnerability analysis against images in the registry is sufficient for security.

upvoted 0 times

...

Naomi

6 months ago

I think option D is the correct answer. You need to scan the images in the registry, during the CI process, and also the running containers to ensure comprehensive security.

upvoted 0 times