2V0-71.23 Question 90
Single answerAn organization is setting up VMware Tanzu Kubernetes Grid (TKG) and wants to secure its container images by using an image registry that supports vulnerability scanning, signing images, and enforcing content trust policies. Which of the following describes the role of Harbor in this scenario?
- A
Harbor acts as a container runtime that manages and runs container workloads.
- B
Harbor serves as a cloud-based image registry exclusively for public container images.
- C
Harbor is an open-source image registry that provides image management, vulnerability scanning, and policy enforcement.
- D
Harbor is a distributed file system used to store container images at scale.
Show answer and explanation
Correct answer: C
Explanation
Harbor is a critical component in VMware Tanzu environments for managing container images securely. It supports features such as vulnerability scanning, signing images, and enforcing content trust policies, which are essential for ensuring the integrity and security of containerized applications.
- A. Incorrect.
Incorrect: Harbor is not a container runtime; container runtimes, such as containerd or CRI-O, are responsible for running container workloads.
- B. Incorrect.
Incorrect: Harbor is not exclusively cloud-based or limited to public container images; it can be deployed both on-premises and in the cloud and supports private image repositories.
- C. Correct.
Correct: Harbor is an open-source image registry that provides advanced features like image management, security scanning, and policy enforcement, making it suitable for securing container images in VMware Tanzu environments.
- D. Incorrect.
Incorrect: Harbor is not a distributed file system; it is an image registry designed for container image management and security.