CCCS-203B · Question #167
Which of the following is a requirement for deploying the Kubernetes and Container Sensor in a Kubernetes cluster?
The correct answer is C. The sensor requires a DaemonSet to be deployed within the Kubernetes cluster.. Option A: Requiring all workloads to use privileged containers would create unnecessary security risks. The Kubernetes and Container Sensor can secure non-privileged containers, which is the recommended best practice for containerized workloads. Option B: Disabling the kube-proxy
Question
Which of the following is a requirement for deploying the Kubernetes and Container Sensor in a Kubernetes cluster?
Options
- AAll workloads in the cluster must use privileged containers.
- BThe cluster must have the kube-proxy component disabled.
- CThe sensor requires a DaemonSet to be deployed within the Kubernetes cluster.
- DThe cluster must have at least three nodes with GPU support.
How the community answered
(40 responses)- A3% (1)
- B3% (1)
- C90% (36)
- D5% (2)
Explanation
Option A: Requiring all workloads to use privileged containers would create unnecessary security risks. The Kubernetes and Container Sensor can secure non-privileged containers, which is the recommended best practice for containerized workloads. Option B: Disabling the kube-proxy component is not required for deploying the Kubernetes and Container Sensor. Kube-proxy is an essential component of Kubernetes networking, and its removal would break cluster functionality. Option C: The Kubernetes and Container Sensor is typically deployed as a DaemonSet to ensure that a sensor pod is running on each node in the Kubernetes cluster. This enables comprehensive monitoring and threat detection across all workloads in the cluster. The DaemonSet is a standard Kubernetes construct for deploying cluster-wide services. Option D: GPU support is not a requirement for deploying the Kubernetes and Container Sensor. GPU nodes are only necessary for specific workloads, such as machine learning applications, and are unrelated to the sensor's deployment.
Topics
Community Discussion
No community discussion yet for this question.