nerdexam
CrowdStrike

CCCS-203B · Question #73

During the deployment of the CrowdStrike Container Sensor in a Kubernetes cluster, the sensor fails to register with the CrowdStrike Falcon platform. What could be the root cause of this issue?

The correct answer is C. The sensor requires a direct internet connection to the CrowdStrike cloud.. Option A: The CrowdStrike Container Sensor is deployed as a DaemonSet to ensure it runs on all nodes, but it does not need a pod per namespace. This misunderstanding could lead to resource waste and unnecessary complexity. Option B: The sensor itself requires elevated privileges

Cloud Workload Protection

Question

During the deployment of the CrowdStrike Container Sensor in a Kubernetes cluster, the sensor fails to register with the CrowdStrike Falcon platform. What could be the root cause of this issue?

Options

  • AThe sensor must be deployed as a DaemonSet with one pod per namespace.
  • BThe sensor requires elevated privileges for all containers running in the cluster.
  • CThe sensor requires a direct internet connection to the CrowdStrike cloud.
  • DThe Kubernetes API server is not configured to allow external admission plugins.

How the community answered

(24 responses)
  • A
    4% (1)
  • B
    17% (4)
  • C
    71% (17)
  • D
    8% (2)

Explanation

Option A: The CrowdStrike Container Sensor is deployed as a DaemonSet to ensure it runs on all nodes, but it does not need a pod per namespace. This misunderstanding could lead to resource waste and unnecessary complexity. Option B: The sensor itself requires elevated privileges to monitor workloads, but it does not enforce privilege elevation on all other containers in the cluster. Option C: The CrowdStrike Container Sensor requires connectivity to the CrowdStrike Falcon cloud for registration, telemetry, and updates. Without a direct internet connection or a properly configured proxy, the sensor cannot communicate with the Falcon platform, leading to deployment failures. Ensuring network connectivity is one of the first troubleshooting steps. Option D: While the Admission Controller relies on external admission plugins, the Container Sensor itself does not require this configuration. This is unrelated to sensor registration.

Topics

#Container Sensor#Kubernetes#sensor registration#internet connectivity

Community Discussion

No community discussion yet for this question.

Full CCCS-203B Practice