The city’s enhanced OKE cluster must admit only trusted images from OCIR. Which image-integrity approach is in scope for this developer exam?
Select an answer to reveal the explanation.
Short Explanation
Sign the image with a Vault key like a wax seal, then tell the cluster to accept only sealed images—simple integrity without dragging in the whole security catalog.
Full Explanation
OKE and OCIR support signing container images with a Vault master key and configuring the cluster to admit only signed images. That is the documented image-integrity measure for this cloud-native developer scope, distinct from WAF, Cloud Guard, or Vulnerability Scanning product tours.