フリー問題

問題文

A secret finding is reported on a container image that is stored in a registry. What does that imply about the workloads started from that image?

選択肢

1. The value is removed at start time, so the stored image is the only place it survives.
2. Every workload started from it carries the same value, so the count of affected workloads can be larger than one.
3. Only the workload that was started most recently carries the value, because each start reads the current contents of the registry and the earlier workloads were started from a version of the image that did not contain it.
4. No workload carries it, because the value exists only in the stored image.