MENU
A container image scanner is set up on the cluster.
Given an incomplete configuration in the directory
Suggested Answer: A
Get Premium CKS Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
13 comments · newest first
MO
Mozell
1 year ago
Not sure if testing with latest is a good idea, though.
IN
India
1 year ago
I think enabling the admission plugin is a must.
RO
Robt
1 year ago
Wait, deploying with the latest tag? Isn't that risky?
GE
Genevive
1 year ago
Implicit deny is definitely the way to go!
BO
Bok
1 year ago
Sounds like a solid plan to secure the cluster.
CH
Chaya
1 year ago
I feel like I’ve seen a similar scenario before, but I can't recall if we needed to specify any additional parameters for the admission plugin to work correctly.
LE
Letha
1 year ago
I remember a practice question where we had to set up image scanning, and I think changing to implicit deny is crucial for security.
AN
Annette
1 year ago
I think enabling the admission plugin is the first step, but I'm not entirely sure how to validate the control configuration.
HE
Hermila
1 year ago
Testing with the 'latest' tag sounds familiar, but I’m a bit confused about how that interacts with the admission plugin.
TI
Timmy
1 year ago
Okay, let me see here. I remember learning about these system services, but I'm drawing a blank on which one uses the hosts.allow file. I'll have to carefully consider each option and try to eliminate the ones that don't fit.
FE
Fernanda
1 year ago
I think the key is to maintain control over the encryption keys. That way, you can be sure the data is completely removed when you need to.
AN
Anisha
1 year ago
I think one disadvantage could be the setup and maintenance costs, but I'm not entirely sure if there's more to it.
SH
Shelba
1 year ago
Okay, I think I've got this. The question is asking us to design a network that only allows the frontend application to access the backend database. So, creating separate VPC networks and connecting them with VPC peering or Cloud VPN seems like the most secure approach to me. I'm going with option C.