A company is deploying CrowdStrike Falcon runtime protection in a Kubernetes environment running both stateful and stateless workloads across multiple cloud providers. They require real- time threat…

Question

Options

• AFalcon Windows Sensor, installed on Kubernetes nodes to provide visibility into containerized
• BFalcon Complete, as it provides fully managed endpoint detection and response (EDR) for
• CFalcon Container Sensor, deployed as a DaemonSet, for full runtime protection of containerized
• DFalcon Linux Sensor, installed on every Kubernetes node to provide per-container monitoring.

• A
  4% (2)
• B
  5% (3)
• C
  80% (45)
• D
  11% (6)

Explanation

Option A: The Falcon Windows Sensor is not designed for Kubernetes environments, which predominantly run on Linux-based containers. Option B: Falcon Complete offers a managed EDR service but is not a sensor specifically optimized for Kubernetes container security. Option C: The Falcon Container Sensor deployed as a DaemonSet is the best choice for runtime protection in Kubernetes environments. It ensures real-time detection and prevention of container threats while minimizing overhead. Option D: While the Falcon Linux Sensor provides security for Linux-based systems, it is not optimized for containerized workloads running in Kubernetes environments.

No community discussion yet for this question.