You are tasked with creating a new Kubernetes Admission Controller policy in Falcon Cloud Security. What is the primary purpose of this policy?

Question

Options

• ATo provide real-time alerts for unauthorized API calls in the Kubernetes control plane.
• BTo monitor network traffic within Kubernetes clusters for malicious activity.
• CTo scan container images for vulnerabilities after deployment.
• DTo control and enforce security configurations at the time of resource creation or update in

• A
  2% (1)
• B
  2% (1)
• C
  5% (2)
• D
  91% (39)

Explanation

Option A: Unauthorized API calls are typically detected and alerted by audit logging or monitoring solutions, not Admission Controller policies. Option B: While Falcon Cloud Security does monitor network traffic, this is not related to Kubernetes Admission Controllers. Network monitoring is handled by different components or tools such as service mesh or network policies. Option C: Scanning container images for vulnerabilities is a separate functionality provided by container security tools but not directly related to Admission Controller policies. Option D: Kubernetes Admission Controllers intercept and validate API requests before they are persisted to the etcd store, allowing policies to enforce security and configuration requirements during resource creation or updates. This is exactly the purpose of creating such policies in Falcon Cloud Security.

No community discussion yet for this question.