Which "kind" of Kubernetes object that is configured to ensure that Defender is acting as the admission controller?

The correct answer is C. ValidatingWebhookConfiguration. Prisma Cloud Defender registers itself as a Kubernetes admission controller using a ValidatingWebhookConfiguration object. This Kubernetes resource tells the API server to send admission review requests to the Defender webhook endpoint, which then validates workloads (pods, deplo

Container Security

Question

Options

APodSecurityPolicies
BDestinationRules
CValidatingWebhookConfiguration
DMutatingWebhookConfiguration

How the community answered

(22 responses)

A
5% (1)
B
5% (1)
C
86% (19)
D
5% (1)

Explanation

Prisma Cloud Defender registers itself as a Kubernetes admission controller using a ValidatingWebhookConfiguration object. This Kubernetes resource tells the API server to send admission review requests to the Defender webhook endpoint, which then validates workloads (pods, deployments, etc.) against Prisma Cloud policies before they are admitted to the cluster. MutatingWebhookConfiguration (D) is used for mutating webhooks that modify resources, not validate them. PodSecurityPolicies (A) is a deprecated Kubernetes-native mechanism. DestinationRules (B) are Istio service mesh objects.

Topics

#Kubernetes Admission Controller#Validating Webhook#Prisma Cloud Defender#Container Security

Community Discussion

No community discussion yet for this question.

Full PCCSE Practice