ITGSS Certified DevOps Engineer Practice Test

What does a failure in the security assessment of a container image result in?

1. The image will be pushed to production anyway

2. The CI pipeline will stop and prevent deployment

3. The image will be stored in a public registry

4. The image will be archived for further inspection

The correct answer is: The CI pipeline will stop and prevent deployment

When there is a failure in the security assessment of a container image, it is crucial for the integrity and security of the application to prevent any potential vulnerabilities from being deployed into production. This is why the CI pipeline is designed to halt the process, effectively stopping any deployment of the image. This practice is essential as it upholds the security standards of the development lifecycle, ensuring that only images that pass the security checks are allowed to progress. Implementing such checks reduces the risk of exposing potential weaknesses that could be exploited by malicious actors. In contrast, the other options do not align with standard practices in DevOps security. Allowing the image to be pushed to production despite security issues undermines the entire purpose of conducting security assessments. Storing the image in a public registry or archiving it for further inspection may be relevant actions post-assessment, but they do not happen automatically in response to a security failure. The primary objective remains to prevent any potentially insecure image from being deployed, which is accomplished by halting the CI pipeline.