VMware Aria Automation 8.x Professional (2023) — Question 38

Which statement about Tanzu Mission Control policies is correct?

Answer options

• A. Policies can be configured using a tag selector to restrict the scope of the policy.
• B. Policies can only be applied to clustergroups.
• C. Policies allow management and operation of the security posture of Kubernetes clusters, and other organizational objects.
• D. Policies can be enforced using Kubernetes resources (NetworkPolicy, ResourceQuota etc) or using the Kyverno admission controller.

Correct answer: C

Explanation

Option C is correct because Tanzu Mission Control policies are designed to manage the security posture of Kubernetes clusters and other related objects effectively. Option A is incorrect as it does not capture the full scope of policy capabilities. Option B misrepresents the application scope of policies, while Option D, although partially true, does not encompass the primary function of policies as described in C.