Multiple Choice
Your organization recently adopted a container-based workflow for application development. Your team develops numerous applications that are deployed continuously through an automated build pipeline to a Kubernetes cluster in the production environment. The security auditor is concerned that developers or operators could circumvent automated testing and push code changes to production without approval. What should you do to enforce approvals?
A) Configure the build system with protected branches that require pull request approval.
B) Use an Admission Controller to verify that incoming requests originate from approved sources.
C) Leverage Kubernetes Role-Based Access Control (RBAC) to restrict access to only approved users.
D) Enable binary authorization inside the Kubernetes cluster and configure the build pipeline as an attestor.
Correct Answer:
Verified
Correct Answer:
Verified
Q1: You are performing a semi-annual capacity planning
Q2: Your company experiences bugs, outages, and slowness
Q3: You have a set of applications running
Q5: You need to reduce the cost of
Q6: You encountered a major service outage that
Q7: You need to deploy a new service
Q8: You support an e-commerce application that runs
Q9: You use Spinnaker to deploy your application
Q10: You are managing the production deployment to
Q11: Your company follows Site Reliability Engineering practices.