CrowdStrike's _____ solution ensures that container deployments are evaluated against policies before being allowed into the Kubernetes cluster.

Question

Options

• ACloud Workload Protection
• BSensor Update Policy
• CKubernetes Admission Controller
• DFusion SOAR

• B
  2% (1)
• C
  94% (45)
• D
  4% (2)

Explanation

Kubernetes Admission Controller (C) is correct because it integrates directly into the Kubernetes API server's admission webhook pipeline, intercepting deployment requests before pods are scheduled. CrowdStrike's implementation evaluates images and configurations against defined policies at this gate, blocking non-compliant workloads from ever entering the cluster.

• A (Cloud Workload Protection) is wrong - CWP monitors running workloads for threats at runtime, not at the deployment admission stage.
• B (Sensor Update Policy) is wrong - this controls how and when the Falcon sensor itself is updated on endpoints, unrelated to container admission.
• D (Fusion SOAR) is wrong - Fusion is CrowdStrike's workflow automation and orchestration platform for incident response, not a Kubernetes gating mechanism.

Memory tip: Think of "admission" literally - a bouncer at the club door (before entry). The Kubernetes Admission Controller is that bouncer, checking IDs (policies) before letting containers in. Cloud Workload Protection is the security camera inside the club watching what's already there.

No community discussion yet for this question.