CCCS-203B: CrowdStrike Certified Cloud Specialist

By CrowdStrike · Question Mode

QuestionQ39

VerifiedRuntime Protection

When using Image Assessment at Runtime (IAR), which installation mode is recommended when your environment supports it?

Explanation

Watcher Mode is the recommended IAR deployment mode for supported environments. It runs as a single-replica Kubernetes deployment to assess images associated with running workloads, whereas Socket Mode is the alternative that relies on direct container-runtime socket access on each node.

Community Discussion

No comments yet. Be the first to start the discussion!