PCCSE · Question #176
An administrator of Prisma Cloud wants to enable role-based access control for Docker engine. Which configuration step is needed first to accomplish this task?
The correct answer is B. Set Defender's listener type to TCP. To enable role-based access control (RBAC) for the Docker engine through Prisma Cloud Compute, the Defender's listener type must first be set to TCP. By default, Docker communicates via a Unix socket, which does not support the remote authentication and authorization flow…
Question
An administrator of Prisma Cloud wants to enable role-based access control for Docker engine. Which configuration step is needed first to accomplish this task?
Options
- AConfigure Docker's authentication sequence to first use an identity provider and then Console.
- BSet Defender's listener type to TCP.
- CSet Docker's listener type to TCP.
- DConfigure Defender's authentication sequence to first use an identity provider and then Console.
How the community answered
(24 responses)- A4% (1)
- B92% (22)
- C4% (1)
Explanation
To enable role-based access control (RBAC) for the Docker engine through Prisma Cloud Compute, the Defender's listener type must first be set to TCP. By default, Docker communicates via a Unix socket, which does not support the remote authentication and authorization flow needed for RBAC. Switching the Defender listener to TCP enables it to intercept Docker API calls, proxy them through the authorization mechanism, and enforce access control policies. This is a prerequisite before any identity provider or Console authentication configuration can take effect for Docker RBAC.
Topics
Community Discussion
No community discussion yet for this question.