Prisma Certified Cloud Security Engineer (PCCSE) — Question 145

Which `kind` of Kubernetes object is configured to ensure that Defender is acting as the admission controller?

Answer options

• A. MutatingWebhookConfiguration
• B. DestinationRules
• C. ValidatingWebhookConfiguration
• D. PodSecurityPolicies

Correct answer: C

Explanation

The correct answer is C, ValidatingWebhookConfiguration, because it specifically ensures that requests to the Kubernetes API server are validated before being processed. The other options do not serve this purpose: A, MutatingWebhookConfiguration modifies requests, B, DestinationRules manage traffic policies, and D, PodSecurityPolicies define security standards for pods.