Review this admission control policy:
match[{"msg": msg}] {
input.request.operation == "CREATE"
input.request.kind.kind == "Pod"
input.request.resource.resource == "pods"
input.request.object.spec.containers[_].securityContext.privileged msg := "Privileged"
}
Which response to this policy will be achieved when the effect is set to `block`?

A. The policy will block all pods on a Privileged host.

B. The policy will replace Defender with a privileged Defender.

C. The policy will alert only the administrator when a privileged pod is created.

D. The policy will block the creation of a privileged pod.








 

Suggested Answer: C

Community Answer: D



This question is in PCCSE Palo Alto Networks Certified Cloud Security Engineer Exam
For getting Palo Alto Networks Certified Cloud Security Engineer (PCCSE) Certificate




Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by Palo Alto Networks. 
Trademarks, certification & product names are used for reference only and belong to Palo Alto Networks.
The website does not contain actual questions and answers from Palo Alto Networks's Certification Exams.