A project manager wants to enforce that all production services use only images from a trusted registry. Which Docker feature supports this at the Swarm level?
-
A
Docker Content Trust (DCT) enforces signed image verification before deployment
-
B
Docker registry mirrors redirect all pull requests to the trusted registry
-
C
Docker Swarm's --image-verify flag blocks unsigned images
-
D
Firewalling all other registries at the host level is the only option