The development team is building pods to host a web front end, and they want to protect these pods with an application firewall. Which type of policy should be created to protect this pod from…

Question

Options

• AThe development team should create a WAAS rule for the host where these pods will be running.
• BThe development team should create a WAAS rule targeted at all resources on the host.
• CThe development team should create a runtime policy with networking protections.
• DThe development team should create a WAAS rule targeted at the image name of the pods.

• A
  15% (6)
• B
  10% (4)
• C
  5% (2)
• D
  71% (29)

Explanation

WAAS (Web Application and API Security) is Prisma Cloud's Layer 7 application firewall for containers and hosts. To protect specific pods running a web front end, the development team should create a WAAS rule scoped to the image name of those pods. Targeting by image name ensures the WAAS policy applies precisely to the containers running that web workload, regardless of which host or node they are scheduled on - this is the correct and most specific approach in a Kubernetes environment. Option A (host-level rule) is too broad and protects the host, not the pods. Option B (all resources on the host) is also overly broad. Option C (runtime policy with networking protections) is not a Layer 7 application firewall; runtime networking protections operate at a lower level and do not provide WAF capabilities like SQLi or XSS protection.

No community discussion yet for this question.