Prisma Certified Cloud Security Engineer (PCCSE) — Question 175

Console is running in a Kubernetes cluster, and you need to deploy Defenders on nodes within this cluster.

Which option shows the steps to deploy the Defenders in Kubernetes using the default Console service name?

Answer options

• A. From the deployment page in Console, choose pod name for Console identifier, generate DaemonSet file, and apply the DaemonSet to twistlock namespace.
• B. From the deployment page configure the cloud credential in Console and allow cloud discovery to auto-protect the Kubernetes nodes.
• C. From the deployment page in Console, choose twistlock-console for Console identifier, generate DaemonSet file, and apply DaemonSet to the twistlock namespace.
• D. From the deployment page in Console, choose twistlock-console for Console identifier, and run the curl | bash script on the master Kubernetes node.

Correct answer: C

Explanation

Option C is correct because it specifies using the default service name 'twistlock-console' to generate and apply the DaemonSet correctly. Option A incorrectly refers to 'pod name' instead of the required service name, and Option B focuses on cloud discovery rather than deploying Defenders. Option D, while close, relies on running a script instead of applying a DaemonSet, which is not the proper method for this task.