1.3 Describe the Purpose and Use Requirements of the Kubernetes Admission Controller CCCS Practice Questions (Page 4)

Questions 16–19

1. 16expert · medium

   A security engineer is configuring the Falcon admission controller to block pods with images that have critical vulnerabilities. The team also wants to allow a specific set of 'baseline' images that are known to be safe, even if they have a critical vulnerability. How can this be achieved?

   • AUse a mutating webhook to rewrite the image tag for baseline images before the validation webhook runs
   • BModify the admission controller's deployment to skip images that are in the 'baseline' namespace
   • CCreate a Falcon policy that includes an allowlist of the baseline images, and apply it to the admission controller
   • DDisable the admission controller for the 'baseline' namespace using a namespaceSelector
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A team is deploying the Falcon admission controller and wants to ensure it can be updated without downtime. Which deployment strategy should they use?

   • AUse a Kubernetes DaemonSet to run the admission controller on every node
   • BUse a Kubernetes StatefulSet with a rolling update strategy
   • CUse a Kubernetes Job to run the admission controller once
   • DUse a Kubernetes Deployment with a rolling update strategy
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A team is deploying the Falcon admission controller using Helm. They have installed the Helm chart, but the controller is not receiving any webhook requests. Which of the following is the most likely cause?

   • AThe Falcon API credentials are invalid, so the controller cannot authenticate
   • BThe cluster is running an older version of Kubernetes that does not support admission webhooks
   • CThe controller is running in a namespace that is not monitored by the webhook
   • DThe ValidatingWebhookConfiguration was not created or was deleted after installation
   Reveal Solution Discussion Select an answer first
5. 19expert · medium

   A company has a cluster with a mix of Linux and Windows nodes. They want to deploy the Falcon admission controller to enforce policies on all workloads. What is a key consideration for this deployment?

   • AThe admission controller can only evaluate Linux pods because it uses Linux-specific image scanning
   • BThe admission controller runs as a Linux container and can evaluate requests for both Linux and Windows pods
   • CThe admission controller must be configured with a Windows-specific webhook configuration
   • DThe admission controller must be deployed separately on Windows nodes to evaluate Windows pods
   Reveal Solution Discussion Select an answer first