2V0-71.23 Question 150
Single answerYour organization is using VMware Tanzu Mission Control to manage multiple Kubernetes clusters. The operations team wants to enforce a security policy across all clusters to ensure that only signed container images are deployed. Which type of policy should be used in Tanzu Mission Control to achieve this goal?
- A
Image Registry Policy
- B
Security Policy
- C
Resource Quota Policy
- D
Network Policy
Show answer and explanation
Correct answer: B
Explanation
In VMware Tanzu Mission Control, policies are used to enforce organizational requirements across Kubernetes clusters. To ensure that only signed container images are deployed, a Security Policy should be used. Security Policies provide the necessary controls to enforce such requirements, making them the appropriate choice in this scenario.
- A. Incorrect.
An Image Registry Policy governs which container registries are allowed but does not enforce the use of signed images. This is not the correct choice for ensuring signed images.
- B. Correct.
A Security Policy in VMware Tanzu Mission Control is designed to enforce security configurations across clusters, including rules like requiring signed container images. This is the correct choice.
- C. Incorrect.
A Resource Quota Policy is used to limit resource consumption (e.g., CPU, memory) but has no capability to enforce image signing requirements. This is not the correct choice.
- D. Incorrect.
A Network Policy is used to define network access control between pods and services but does not address image signing. This is not the correct choice.