CrowdStrike Falcon Cloud Security provides integration with Kubernetes admission controllers to enhance security by enforcing policies on workloads. What is the primary function of a Kubernetes admiss

Question

Options

• AIt intercepts and evaluates requests to the Kubernetes API server before objects are persisted in
• BIt monitors outbound network traffic from pods to detect anomalies and prevent data exfiltration.
• CIt scans container images at runtime to detect threats and automatically stops malicious
• DIt replaces Kubernetes Role-Based Access Control (RBAC) to provide more granular permissions

• A
  94% (32)
• B
  3% (1)
• C
  3% (1)

Explanation

Option A: Kubernetes admission controllers operate within the API request lifecycle and evaluate incoming requests before they are committed to etcd, the Kubernetes database. In Falcon Cloud Security, the admission controller enforces policies such as allowing only trusted container images, preventing the deployment of misconfigured workloads, and ensuring security compliance. This ensures that threats are mitigated before they are deployed, reducing the attack Option B: Network monitoring is a different function handled by network security tools such as Falcon Cloud Security's workload protection capabilities, which inspect outbound traffic. Admission controllers, however, focus on evaluating and enforcing security policies during Option C: Runtime security scanning is an essential security function but is separate from admission controllers. Runtime protection is handled by tools like Falcon Container Security, which continuously monitors running containers for threats. Admission controllers operate at the deployment phase rather than runtime. Option D: Kubernetes RBAC controls access to resources, while admission controllers validate or mutate requests before resources are created. They do not replace RBAC but can complement it by enforcing additional security policies.

No community discussion yet for this question.