An organization plans to deploy a Kubernetes Admission Controller policy using Falcon Cloud Security to enforce the restriction of privileged containers in its clusters. What is the first step the…

Question

Options

• ADefine the "PodSecurityPolicy" manifest in Kubernetes.
• BUse the Falcon Cloud Security Console to create a policy in the Admission Controller Policies
• CApply the Admission Controller policy via a Helm chart.
• DConfigure the policy directly in the Kubernetes cluster's kube-apiserver.

• A
  4% (2)
• B
  85% (39)
• C
  9% (4)
• D
  2% (1)

Explanation

Option A: PodSecurityPolicy is a deprecated Kubernetes feature. Falcon Cloud Security uses its Admission Controller functionality, which does not rely on Kubernetes-native PodSecurityPolicies. Option B: Falcon Cloud Security provides a centralized console for managing Kubernetes Admission Controller policies. The administrator can define restrictions like prohibiting privileged containers directly within this console. Option C: Helm charts are used for deploying applications and resources into Kubernetes clusters. While Helm can deploy the Falcon Container Sensor, it does not directly manage Admission Controller policies. Option D: While Admission Controllers are invoked by the kube-apiserver, policies for Falcon's Admission Controller are managed within the Falcon Cloud Security Console, not directly in the

No community discussion yet for this question.