2V0-71.23 Question 128
Single answerYour organization is using Tanzu Mission Control (TMC) to manage multiple Kubernetes clusters across different environments. The security team has mandated that all clusters must enforce pod security policies to meet compliance requirements. Using TMC, how can you ensure that these policies are consistently applied across all clusters?
- A
Create a custom policy in Tanzu Mission Control and apply it to the required clusters.
- B
Use TMC's data protection feature to back up clusters with the desired pod security policies.
- C
Enable pod security policies at the Kubernetes API server level for each cluster separately.
- D
Leverage TMC’s policy management feature to enforce a pod security policy across multiple clusters.
Show answer and explanation
Correct answer: D
Explanation
The correct approach to enforce pod security policies across multiple clusters using Tanzu Mission Control is to utilize its policy management feature. This feature allows administrators to define and apply policies, such as pod security policies, across clusters in a consistent and centralized manner. This ensures compliance requirements are met efficiently without needing to configure each cluster individually.
- A. Incorrect.
This is incorrect because while you can create a custom policy in TMC, pod security policies require the use of a specific policy type within TMC’s policy management feature.
- B. Incorrect.
This is incorrect because TMC’s data protection feature is used for backup and recovery, not for enforcing pod security policies.
- C. Incorrect.
This is incorrect because enabling pod security policies at the Kubernetes API server level for each cluster separately does not leverage TMC’s centralized management capabilities.
- D. Correct.
This is correct because TMC’s policy management feature allows you to enforce pod security policies across multiple clusters consistently and centrally, meeting compliance requirements.