nerdexam
CrowdStrike

CCCS-203B · Question #167

Which of the following is a requirement for deploying the Kubernetes and Container Sensor in a Kubernetes cluster?

The correct answer is C. The sensor requires a DaemonSet to be deployed within the Kubernetes cluster.. Option A: Requiring all workloads to use privileged containers would create unnecessary security risks. The Kubernetes and Container Sensor can secure non-privileged containers, which is the recommended best practice for containerized workloads. Option B: Disabling the kube-proxy

Kubernetes and Container Security

Question

Which of the following is a requirement for deploying the Kubernetes and Container Sensor in a Kubernetes cluster?

Options

  • AAll workloads in the cluster must use privileged containers.
  • BThe cluster must have the kube-proxy component disabled.
  • CThe sensor requires a DaemonSet to be deployed within the Kubernetes cluster.
  • DThe cluster must have at least three nodes with GPU support.

How the community answered

(40 responses)
  • A
    3% (1)
  • B
    3% (1)
  • C
    90% (36)
  • D
    5% (2)

Explanation

Option A: Requiring all workloads to use privileged containers would create unnecessary security risks. The Kubernetes and Container Sensor can secure non-privileged containers, which is the recommended best practice for containerized workloads. Option B: Disabling the kube-proxy component is not required for deploying the Kubernetes and Container Sensor. Kube-proxy is an essential component of Kubernetes networking, and its removal would break cluster functionality. Option C: The Kubernetes and Container Sensor is typically deployed as a DaemonSet to ensure that a sensor pod is running on each node in the Kubernetes cluster. This enables comprehensive monitoring and threat detection across all workloads in the cluster. The DaemonSet is a standard Kubernetes construct for deploying cluster-wide services. Option D: GPU support is not a requirement for deploying the Kubernetes and Container Sensor. GPU nodes are only necessary for specific workloads, such as machine learning applications, and are unrelated to the sensor's deployment.

Topics

#Kubernetes Sensor#DaemonSet#Container Sensor Deployment#Cluster Requirements

Community Discussion

No community discussion yet for this question.

Full CCCS-203B Practice