Security finds a vulnerable library inside a deployed container image. Which lifecycle response is most appropriate?

Choose the single best answer.

A.Rebuild and scan a corrected version, then deploy a controlled image digest or version
B.Grant every host anonymous access to private images
C.Treat Container Registry storage as proof that the image is secure
D.Patch each running container manually and retain the vulnerable source image

Show the answer and explanation

✓ Correct answer

Rebuild and scan a corrected version, then deploy a controlled image digest or version

A corrected, scanned, controlled image gives reproducible replacement of vulnerable code. In-place patches disappear on recreation and leave the source vulnerable, registry storage is not a security guarantee, and anonymous access weakens image protection rather than fixing dependencies. Source guide: PDF page(s) 46.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.