Prisma Certified Cloud Security Engineer (PCCSE) — Question 167

Which two options may be used to upgrade the Defenders with a Console v20.04 and Kubernetes deployment? (Choose two.)

Answer options

• A. Run the provided curl | bash script from Console to remove Defenders, and then use Cloud Discovery to automatically redeploy Defenders.
• B. Remove Defenders DaemonSet, and then use Cloud Discovery to automatically redeploy the Defenders.
• C. Remove Defenders, and then deploy the new DaemonSet so Defenders do not have to automatically update on each deployment.
• D. Let Defenders automatically upgrade.

Correct answer: C, D

Explanation

Option C is correct because it explicitly states to deploy the new DaemonSet after removing the old Defenders, preventing automatic updates which can lead to inconsistencies. Option D is also correct as it allows Defenders to handle upgrades on their own. Options A and B are incorrect because they involve removing the Defenders without specifying the deployment of a new DaemonSet, which is essential for a proper upgrade.