Runtime Security in Container Orchestration GCSA Practice Questions (Page 8)

Questions 36–37

1. 36foundation · easy

   Which runtime security tool is known for providing container image scanning, runtime protection, and compliance checks as part of a comprehensive container security platform?

   • AFalco
   • BKube-bench
   • CAqua Security
   • DSysdig
   Reveal Solution Discussion Select an answer first
2. 37expert · hard

   A security engineer is configuring runtime policies for a Kubernetes cluster that runs both Linux and Windows containers. They want to use Falco to detect suspicious activity, but they notice that Falco does not support Windows containers. Which alternative approach should they use for Windows nodes?

   • AUse Sysdig Secure, which supports both Linux and Windows containers with the same agent.
   • BUse Windows Defender Advanced Threat Protection (ATP) to monitor Windows containers.
   • CUse Kubernetes audit logging to monitor Windows container activity.
   • DUse a combination of Kubernetes audit logging and Windows Event Logs to detect suspicious activity.
   Reveal Solution Discussion Select an answer first