SC-100 Practice Question 4029
Exam: SC-100
Domain: Design security solutions for applications and data
Difficulty: hard
In designing a secure software supply chain in Azure, what technology allows developers to cryptographically sign container images to ensure only verified, untampered images run on Kubernetes clusters?
Answer Options
A
Notary / Notation image signing integrated with ACR and Azure Policy
B
Manually inspecting binary code lines by hand before deployment
C
Uploading container images to public unauthenticated registries
D
Running container pods as root with privileged flags enabled
Correct Answer
A: Notary / Notation image signing integrated with ACR and Azure Policy
Explanation
Notary / Notation image signing integrated with Azure Container Registry (ACR) and Azure Policy enforces cluster admission control, running only signed and trusted container images.