Question 530
At the Lakehaven professional services partnership, a container image with a known exploitable high-severity dependency is promoted straight from build to production. What risk should the team identify as the primary issue?
Explanation
Correct Answer
The situation shows that automated deployment speed cannot replace security acceptance of vulnerable components, rather than merely a monitoring or presentation issue. Remediation is to add risk-based dependency and container image scanning with promotion gates.
Incorrect Answers
Infrastructure as Code checked into source history can disclose privileged keys. That may occur elsewhere, but the evidence at the Lakehaven professional services partnership instead points to the fact that automated deployment speed cannot replace security acceptance of vulnerable components.
The offered alternative is: Provider storage encryption cannot substitute for customer authorization policy. It addresses this separate failure mode: Provider storage encryption cannot substitute for customer authorization policy. In the current case, the observed mechanism is: Automated deployment speed cannot replace security acceptance of vulnerable components. The keyed action, Automated deployment speed cannot replace security acceptance of vulnerable components., targets that condition more directly.
The provider operates the application but the customer normally retains user access decisions. That is not the mechanism that accounts for the stated failure at the Lakehaven professional services partnership.