MENU
A container image scanner is set up on the cluster.
Given an incomplete configuration in the directory
/etc/kubernetes/confcontrol and a functional container image scanner with HTTPS endpoint https://test-server.local.8081/image_policy
1. Enable the admission plugin.
2. Validate the control configuration and change it to implicit deny.
Finally, test the configuration by deploying the pod having the image tag as latest.
Suggested Answer: A
Get Premium CKS Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
29 comments · newest first
MI
Milly
7 months ago
Testing with the latest image tag is a good final step.
CO
Cordelia
7 months ago
I’d go with the ssh-add command first.
LA
Lauran
7 months ago
Implicit deny makes sense for security.
CA
Candra
7 months ago
Yeah, but validating the control config is crucial too.
LI
Lizette
7 months ago
I think enabling the admission plugin is key.
AS
Ashley
7 months ago
This question is tricky. I feel a bit lost.
MA
Marcelle
8 months ago
I thought we were supposed to allow specific images, not deny everything?
HO
Hoa
8 months ago
Implicit deny is a must for better control!
MI
Mignon
8 months ago
Wait, why are we using the latest tag? Isn't that risky?
XO
Xochitl
9 months ago
Totally agree, that’s crucial for security.
MA
Marjory
9 months ago
Make sure to check the image policy endpoint!
RO
Roselle
9 months ago
Haha, the "ssh-add" and "eval" commands have nothing to do with this question. That's just a random set of commands.
RE
Reita
9 months ago
The image looks like it's related to the question, but I'm not sure how it fits in.
MA
Maurine
9 months ago
The steps mentioned in the question seem logical, but I'm not sure if that's the complete answer.
DA
Daryl
9 months ago
The question seems straightforward, but I'm not sure about the correct answer.
SU
Sunshine
10 months ago
I definitely remember the HTTPS endpoint part, but I’m not clear on how to connect it with the admission plugin settings.
FR
Francis
10 months ago
I feel like the testing part with the pod deployment is crucial, but I’m a bit confused about how the image tag affects the admission control.
ED
Edison
10 months ago
I think we had a similar question about validating configurations, but I can’t recall the exact steps to change it to implicit deny.
TH
Theron
10 months ago
I remember we practiced enabling the admission plugin, but I’m not sure if it was for a scanner or something else.
SH
Sheridan
10 months ago
This is a lot of information to process. I'm a bit confused about the whole container image scanner and HTTPS endpoint. I'll need to make sure I understand those concepts before I can really tackle this question.
CO
Colton
10 months ago
I think I've got a handle on this. First, I'll enable the admission plugin. Then I'll validate the control configuration and change it to implicit deny. Finally, I'll test the configuration by deploying a pod with the latest image tag. I feel pretty confident I can tackle this question.
TA
Tamesha
11 months ago
Hmm, this is a bit complex. I'll need to make sure I understand the container image scanner and how to test the configuration by deploying a pod with the latest image tag. I might have to do some research on that.
LA
Lawrence
11 months ago
Okay, let's see. First, I need to enable the admission plugin. That seems straightforward enough. Then I have to validate the control configuration and change it to implicit deny. I'm not sure exactly what that means, but I'll have to look into it.
HO
Horace
12 months ago
This looks like a tricky question. I'll need to carefully read through the instructions and make sure I understand all the steps.
AN
Angelo
6 months ago
I’ll take notes while I go through it.
MI
Ming
6 months ago
Make sure to check the configuration carefully.
HO
Hollis
11 months ago
I agree, lots of steps to follow.
CE
Cecily
11 months ago
Testing the pod will be crucial!
SU
Sunny
11 months ago
This is definitely complex.