Q34 Container Registry Domain 1 · 20–25% of exam

What does ACR Content Trust provide?

  1. A Image retention and cleanup
  2. B Geo-replication across regions
  3. C Digital signature verification to ensure only trusted images can be pulled (correct answer)
  4. D Network firewall rules

Shortcut: Content Trust uses Notary (OCI signing) to sign images. When enabled on a registry, only images with verified signatures can be pulled.