2V0-71.23 Question 151
Single answerAn organization is using VMware Tanzu Mission Control to manage their Kubernetes clusters. They want to enforce specific security policies across multiple clusters to restrict image sources to trusted registries. Which action best aligns with the role of policies in this scenario?
- A
Define and enforce an Image Registry policy to allow only trusted registries.
- B
Manually configure each cluster to use trusted image registries.
- C
Disable role-based access control (RBAC) to simplify policy enforcement.
- D
Create a new namespace in each cluster to apply security policies manually.
Show answer and explanation
Correct answer: A
Explanation
Policies in VMware Tanzu Mission Control provide a centralized way to manage configurations and enforce security standards across Kubernetes clusters. In this scenario, using an Image Registry policy ensures that all clusters adhere to the organization's requirement of only using trusted registries, improving both security and operational efficiency.
- A. Correct.
This is correct. Policies in VMware Tanzu Mission Control can define and enforce rules like restricting image sources to trusted registries, ensuring consistency and security across clusters.
- B. Incorrect.
This is incorrect. Manually configuring each cluster is error-prone and does not leverage the centralized policy management capabilities of VMware Tanzu Mission Control.
- C. Incorrect.
This is incorrect. Disabling RBAC would reduce security and does not align with the goal of enforcing policies effectively.
- D. Incorrect.
This is incorrect. Creating namespaces manually does not address the requirement for centralized policy enforcement and is not scalable.