A registry image was rebuilt to fix a critical vulnerability, but deployed pods remain pinned to the old image digest. What should the architect require?

Choose the single best answer.

A.Rescan only the replacement artifact while ignoring running pods
B.Close the finding when the fixed registry image exists
C.Restart the pods while keeping the old pinned image digest
D.Deploy the corrected image and verify the effective running artifact

Show the answer and explanation

✓ Correct answer

Deploy the corrected image and verify the effective running artifact

Deploy the corrected image digest and verify that running pods use it. A fixed but unused registry image does not change existing workloads. Scanning only the replacement artifact misses running exposure. Restarting with the old pinned digest continues to execute the vulnerable artifact.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.