A company using CrowdStrike Falcon Cloud Security wants to ensure that all container images deployed in their cloud environment are scanned for…

Option A: Pre-deployment scanning with enforcement ensures that only secure images are deployed,

blocking those with critical vulnerabilities. This helps mitigate security risks before they reach

production.

Option B: While notifying administrators about vulnerabilities is useful, allowing all images regardless

of severity increases risk by deploying insecure workloads.

Option C: Relying on manual assessments makes security processes inefficient and inconsistent, leading

to gaps in protection.

Option D: Post-deployment scanning is useful for continuous monitoring, but it does not prevent

vulnerable images from being deployed in the first place.