You will create an Azure container registry named ContReg1 and need to be able to push and pull signed images. What must you enable for ContReg1?

To push and pull signed images in Azure Container Registry, you must enable content trust. Content trust allows you to sign images that you push to the registry and verify the integrity and authenticity of images you pull. This uses Notary to ensure that images come from a trusted source and have not been tampered with. Enabling encryption with a customer-managed key protects data at rest but doesn't relate to image signing. Creating a connected registry extends the registry to on-premises or edge environments. Adding a token provides authentication for registry access but doesn't enable image signing.