CCCS-203B: CrowdStrike Certified Cloud Specialist

By CrowdStrike · Question Mode

QuestionQ12

VerifiedPre-Runtime Protection

You are concerned about containers in your cluster that have excessive privileges.

Which Kubernetes IOM rule alerts when containers are deployed with excessive permissions?

Explanation

The SYS_ADMIN Linux capability grants a very broad set of privileged operations and is commonly treated as highly sensitive. Detecting containers configured with this capability identifies workloads deployed with excessive permissions.

Community Discussion

No comments yet. Be the first to start the discussion!