Which feature of a container registry helps enforce secure image retrieval?

Which feature of a container registry helps enforce secure image retrieval?

• A. It provides a simple UI label for images.
• B. It enforces who can push and pull images and can enforce image integrity via signing.
• C. It stores logs of image pulls only.
• D. It monitors container performance in production.

Answer: (B)

Access control and image signing enforce secure image retrieval. When a registry restricts who can push and pull, only authorized users or services can access images, preventing unauthorized downloads. Image signing adds a trust check, allowing clients and the registry to verify that an image comes from a trusted source and hasn’t been altered since it was signed. This combination ensures both who can obtain the image and that the image is authentic and intact at retrieval. Other features don’t provide retrieval security: a simple UI label is cosmetic, logging pulls aids auditing but doesn’t prevent access or verify integrity, and monitoring performance focuses on runtime behavior rather than securing how images are fetched.

Access control and image signing enforce secure image retrieval. When a registry restricts who can push and pull, only authorized users or services can access images, preventing unauthorized downloads. Image signing adds a trust check, allowing clients and the registry to verify that an image comes from a trusted source and hasn’t been altered since it was signed. This combination ensures both who can obtain the image and that the image is authentic and intact at retrieval. Other features don’t provide retrieval security: a simple UI label is cosmetic, logging pulls aids auditing but doesn’t prevent access or verify integrity, and monitoring performance focuses on runtime behavior rather than securing how images are fetched.