To ensure CrowdStrike can perform uninterrupted image assessments, which of the following steps must you take when adding CrowdStrike IP addresses to…

Option A: This is incorrect because CrowdStrike's IP addresses for image assessment are distinct from

14/192

general regional data center IPs. Using only regional data center IPs will not enable the image assessment

functionality.

Option B: This is incorrect because CrowdStrike services require external IP addresses for

communication. Internal IP addresses are irrelevant to enabling CrowdStrike's image assessment

functionality.

Option C: This is incorrect because adding CrowdStrike IP addresses to the denylist would block their

access, making image assessments impossible. Allowlisting is the correct approach.

Option D: This is correct because CrowdStrike publishes specific IP addresses that its services use to

communicate with container registries for image assessments. These IP addresses must be added to the

allowlist of the container registry to permit scanning activities without interruption.