Which of the following is a necessary requirement for deploying the Kubernetes protection agent in a containerized environment?

Question

Options

• AEnsure the Kubernetes cluster has role-based access control (RBAC) enabled to support the
• BEnable the default Kubernetes audit logs and assume the agent will integrate without additional
• CAssign full administrative privileges to all service accounts in the Kubernetes cluster.
• DInstall the agent directly on each container running within the Kubernetes cluster.

• A
  80% (51)
• B
  6% (4)
• C
  3% (2)
• D
  11% (7)

Explanation

Option A: RBAC is a critical requirement for deploying the Kubernetes protection agent. It ensures that the agent has the necessary permissions to monitor and protect the cluster effectively. Without proper RBAC configuration, the agent cannot access required resources or enforce security policies. Option B: While enabling Kubernetes audit logs is a good practice for security monitoring, it is not a substitute for configuring the Kubernetes protection agent. The agent requires additional setup to monitor and protect workloads effectively. Option C: Granting full administrative privileges to all service accounts violates the principle of least privilege and increases the attack surface. The agent requires specific permissions, which can be granted using RBAC without over-provisioning access. Option D: Installing the agent directly on individual containers is not how the Kubernetes protection agent operates. The agent is deployed at the node level or via DaemonSet to monitor containerized workloads across the cluster.

No community discussion yet for this question.