Question 6
Application DeliveryWhich statement is true about the container image tag `latest`?
Correct answer: B
Explanation
The tag `latest` is not a fixed version; it is a mutable pointer that can be moved to a different image over time. Because it can change without the tag name changing, deployments using `latest` are not reproducible.
Why each option is right or wrong
A. Guarantees the newest secure version
B. Is a mutable pointer that can change, making deployments non-reproducible
In Docker image tagging, a tag is just a label that points to an image manifest, and `latest` is not a special immutable version identifier under the OCI/Docker image reference model. Because the tag can be reassigned to a different digest at any time, a deployment that pulls `:latest` may resolve to a different image on a later run, so the build/deploy outcome is not reproducible unless the image is pinned by digest (for example, `@sha256:...`).
C. Is immutable and version-pinned
D. Cannot be used in production