Valid 1Z0-1084-21 Dumps shared by ExamDiscuss.com for Helping Passing 1Z0-1084-21 Exam! ExamDiscuss.com now offer the newest 1Z0-1084-21 exam dumps, the ExamDiscuss.com 1Z0-1084-21 exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com 1Z0-1084-21 dumps with Test Engine here:
A pod security policy (PSP) is implemented in your Oracle Cloud Infrastructure Container Engine for Kubernetes cluster Which rule can you use to prevent a container from running as root using PSP?
Correct Answer: C
Explanation What is a Pod Security Policy? A Pod Security Policy is a cluster-level resource that controlssecurity sensitive aspects of the pod specification. The PodSecurityPolicy objects define a set of conditions that a pod must run with inorder to be accepted into the system, as well as defaults for the related fields. They allow an administrator to control the following: Privilege Escalation These options control the allowPrivilegeEscalation container option. This bool directly controls whether the no_new_privs flag gets set on the container process. This flag will prevent setuid binaries from changing the effective user ID, and prevent files from enabling extra capabilities (e.g. it will prevent the use of the ping tool). This behavior is required to effectively enforce MustRunAsNonRoot. example: # Require the container to run without root privileges. rule: 'MustRunAsNonRoot'
