After deploying the CrowdStrike Kubernetes protection agent, an organization wants to ensure their environment is fully protected. Which of the following describes a key feature of the Kubernetes prot

Question

Options

• AThe agent performs host-level vulnerability scanning exclusively for the Kubernetes control plane.
• BThe agent enables runtime protection by monitoring container activities and blocking malicious
• CThe agent replaces the need for Kubernetes Role-Based Access Control (RBAC) policies.
• DThe agent provides deep packet inspection for all network traffic in the cluster.

• B
  92% (36)
• C
  3% (1)
• D
  5% (2)

Explanation

Option A: This is incorrect as the Kubernetes protection agent provides protection across nodes and workloads, not exclusively the control plane. Host-level vulnerability scanning is a broader CrowdStrike capability. Option B: One of the core features of the Kubernetes protection agent is runtime protection, which involves monitoring container activities, detecting malicious behaviors, and providing mechanisms to block them in real time. This helps ensure the security of running workloads. Option C: This is incorrect because the Kubernetes protection agent complements Kubernetes security practices, including RBAC policies, rather than replacing them. Proper RBAC configuration remains essential for a secure cluster. Option D: This is incorrect because the Kubernetes protection agent does not focus on deep packet inspection. Instead, it emphasizes runtime protection, workload monitoring, and compliance. Network security may require additional specialized tools.

No community discussion yet for this question.