How does an administrator trust all images within a registry?

How does an administrator trust all images within a registry?

• A. acme.*
• B. registry.acme.com/*
• C. acme.com/myrepo/allimages.*
• D. *.acme.com

Answer: (B)

The option that allows an administrator to trust all images within a registry is "registry.acme.com/*". This choice specifies that all images under the "registry.acme.com" domain are trusted. By using the wildcard (*) at the end, it indicates that every image path within that registry should be included in the trust policy. This level of specificity ensures that any image pulled from that particular registry is automatically trusted, which is essential for security and regulatory compliance in environments where container images are frequently used. The administrator can thus manage security settings efficiently without needing to adjust configurations for individual images or repositories. In contrast to the other options, this choice correctly targets a specific registry endpoint, enabling broader yet controlled trust in the image sources.

The option that allows an administrator to trust all images within a registry is "registry.acme.com/". This choice specifies that all images under the "registry.acme.com" domain are trusted. By using the wildcard () at the end, it indicates that every image path within that registry should be included in the trust policy.

This level of specificity ensures that any image pulled from that particular registry is automatically trusted, which is essential for security and regulatory compliance in environments where container images are frequently used. The administrator can thus manage security settings efficiently without needing to adjust configurations for individual images or repositories. In contrast to the other options, this choice correctly targets a specific registry endpoint, enabling broader yet controlled trust in the image sources.