ITGSS Certified DevOps Engineer Practice Test

Which component should a CI pipeline integrate to ensure the security of images?

1. Performance testing

2. Vulnerability scanning

3. Load balancing

4. External auditing

The correct answer is: Vulnerability scanning

Integrating vulnerability scanning into a CI pipeline is crucial for ensuring the security of images. Vulnerability scanning identifies known security flaws, misconfigurations, and other weaknesses in the software components that comprise the images. By automatically scanning images during the continuous integration process, teams can catch potential vulnerabilities early in the development lifecycle, before deployment. This proactive approach helps in maintaining a secure environment and reduces the risk of exposing applications to security threats after they go live. In contrast, while performance testing assesses how a system performs under various conditions, it does not evaluate security vulnerabilities. Load balancing relates to distributing workloads across multiple resources for efficiency and does not address image security. External auditing, although beneficial for broader security assessments, occurs independently of the CI pipeline and often does not provide the immediate feedback that vulnerability scanning does throughout the development process. Thus, vulnerability scanning stands out as the most effective component for securing images in a CI pipeline.