The development team wants to block Cross Site Scripting attacks from pods in its environment. How should the team construct the CNAF policy to protect against this attack?
A.
create a Host CNAF policy, targeted at a specific resource, check the box for XSS attack protection, and set the action to ג€preventג€.
B.
create a Container CNAF policy, targeted at a specific resource, check the box for XSS attack protection, and set the action to alert.
C.
create a Container CNAF policy, targeted at a specific resource, check the box for XSS protection, and set the action to prevent.
D.
create a Container CNAF policy, targeted at a specific resource, and they should set ג€Explicitly allowed inbound IP sourcesג€ to the IP address of the pod.
C.
Prevent - The request is denied from reaching the protected application, an audit is generated and WAAS responds with an HTML page indicating the request was blocked.
Supported only in WAAS Inline proxy setup.
Unlike other systems you may have used in the past, Kubernetes doesn't run containers directly; instead it wraps one or more containers into a higher-level structure called a pod. Any containers in the same pod will share the same resources and local network. Pods are used as the unit of replication in Kubernetes.
The "one-container-per-Pod" model is the most common Kubernetes use case; in this case, you can think of a Pod as a wrapper around a single container; Kubernetes manages Pods rather than managing the containers directly.
upvoted 1 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
[Removed]
Highly Voted 1 year, 10 months agoSpippolo
Most Recent 1 month, 1 week agoJihe
1 month, 2 weeks agokumar_57
3 months, 3 weeks agotipzzz
6 months agopiipo
1 year, 3 months agoSakeBomb
1 year, 5 months agoSakeBomb
1 year, 5 months ago