Exit SC-500 Microsoft Certified: Cloud and AI Security Engineer Associate
Question 3 of 5
0% complete
Q3 Single choice

You have an Azure subscription named Sub1 that contains an Azure Kubernetes Service (AKS) cluster named cluster1 and an Azure container registry named ACR1. Sub1 has Microsoft Defender for Containers enabled, and runtime protection is active on cluster1.

The developers at your company deploy pods that have elevated privileges, and the deployments are created in cluster1.

You need to prevent pods with elevated privileges from being accepted by cluster1.

What should you do?

  • A

    Create an Azure policy for cluster1.

  • B

    Enable agentless discovery for Kubernetes in Defender for Containers.

  • C

    Configure runtime threat protection alerts for privileged container activity.

  • D

    Enable vulnerability assessment for images in ACR1.

Previous Next