CrowdStrike CCCS-203b Exam - Topic 7 Question 18 Discussion

Question

What is required to ensure you can retrieve the Falcon KAC image when deploying the Falcon Kubernetes Admission Controller (KAC) with a Helm chart?

Roslyn · Accepted Answer

D) API client key
When deploying the Falcon Kubernetes Admission Controller (KAC) using a Helm chart, access to CrowdStrike-hosted container images is required. These images are stored in CrowdStrike's private container registry, which requires authentication.
To retrieve the Falcon KAC image, a valid CrowdStrike API client key (client ID and secret) must be provided. This API credential allows Helm to authenticate to the Falcon registry and securely pull the required KAC image during deployment. Without valid API credentials, image retrieval fails, and the KAC deployment cannot complete successfully.
Other options listed do not satisfy this requirement. SENSOR_PLATFORM and FALCON_REGION are configuration parameters used during sensor installation but do not authenticate registry access. Docker itself is not sufficient, as authentication to the CrowdStrike registry is still required.
Therefore, an API client key is mandatory to ensure successful retrieval of the Falcon KAC image during Helm-based deployment.

Roslyn · Answer

A) SENSOR_PLATFORM

Roslyn · Answer

B) FALCON_REGION

Roslyn · Answer

C) Docker