KCNA · Question #94
What's the difference between a security profile and a security context?
The correct answer is B. Security Contexts configure Pods and Containers at runtime. Security profiles are control plane. Security Contexts configure runtime permissions for Pods and Containers, while security profiles (like Seccomp or AppArmor) are broader, system-level policies often managed at the control plane to enhance container isolation.
Question
What's the difference between a security profile and a security context?
Options
- ASecurity Contexts configure Clusters and Namespaces at runtime. Security profiles are control
- BSecurity Contexts configure Pods and Containers at runtime. Security profiles are control plane
- CSecurity Profiles configure Pods and Containers at runtime. Security Contexts are control plane
- DSecurity Profiles configure Clusters and Namespaces at runtime. Security Contexts are control
How the community answered
(38 responses)- A3% (1)
- B89% (34)
- C3% (1)
- D5% (2)
Why each option
Security Contexts configure runtime permissions for Pods and Containers, while security profiles (like Seccomp or AppArmor) are broader, system-level policies often managed at the control plane to enhance container isolation.
Security Contexts apply to Pods and Containers, not Clusters and Namespaces.
A Security Context defines privilege and access control settings for a Pod or Container, such as user ID, group ID, and capabilities, which apply at runtime. Security profiles like Seccomp or AppArmor provide granular control over system calls a container can make, and while they affect runtime, they are often managed as broader policies (control plane aspects) that are applied to pods.
The definitions are swapped; Security Contexts apply to Pods/Containers, and security profiles (like Seccomp/AppArmor) are the broader policies.
Neither Security Contexts nor Security Profiles directly configure Clusters and Namespaces; their focus is on Pod and Container security.
Concept tested: Kubernetes Security Contexts vs. Security Profiles
Source: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
Topics
Community Discussion
No community discussion yet for this question.