2V0-71.23 Question 341
Single answerAs part of securing a VMware Tanzu Kubernetes Grid (TKG) environment, an organization wants to ensure that images used in their clusters are scanned for vulnerabilities before deployment. Which feature or tool is most appropriate for achieving this in the Tanzu ecosystem?
- A
Tanzu Mission Control (TMC) Policies
- B
Tanzu Build Service (TBS) with Image Signing
- C
Velero Backup and Restore
- D
Contour Ingress Controller
Show answer and explanation
Correct answer: B
Explanation
Tanzu Build Service (TBS) is a key component of the Tanzu ecosystem for automating the building and securing of container images. It integrates with image scanning tools to detect vulnerabilities and ensures images are signed before deployment, addressing security concerns effectively. Other tools like TMC, Velero, and Contour serve different purposes and do not directly address the requirement for image scanning and signing.
- A. Incorrect.
Tanzu Mission Control (TMC) Policies are used for access control and governance but do not specifically handle image scanning or signing.
- B. Correct.
Tanzu Build Service (TBS) with Image Signing provides a mechanism for building, scanning, and signing container images to ensure they are secure and verified before deployment.
- C. Incorrect.
Velero is a tool for backup and restore operations in Kubernetes environments. It does not handle image scanning or signing processes.
- D. Incorrect.
Contour is an ingress controller that facilitates traffic management for Kubernetes clusters but does not address image security or vulnerability scanning.