You want automated rebuilds whenever the 'python:3.12-slim' base image receives a security patch. What must be true for the ACR base image update trigger to fire?
- A The base image must live in the same ACR registry only
- B The Dockerfile FROM reference must be tracked, and the task registered with --base-image-trigger-enabled (correct answer)
- C Content Trust must be enabled
- D The task must run on a cron schedule
Shortcut: ACR Tasks record the base image dependency at build time. With the base image trigger enabled, ACR watches that dependency (in ACR or Docker Hub) and queues a rebuild when the digest changes.