Practice question 336 of 498 · hard
A cluster has agentless posture discovery, but the requirement includes suspicious runtime activity and policy rejection at admission. Which two additional capabilities should be evaluated? Select two.
Select all that apply. Every correct option and no extras are required for credit in the app.
Show the answer and explanation
✓ Correct answers
- Azure Policy for Kubernetes or equivalent admission enforcement
- The supported Defender runtime sensor
A supported runtime sensor and admission enforcement provide the two missing capabilities. Image assessment identifies package weaknesses, RBAC governs authorized operations, and network policy constrains traffic. Those controls complement the design but do not themselves supply suspicious runtime detection and configuration rejection at admission.
Read and review here, or open the app to practise and save your results on this device.
Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.