2V0-71.23 Question 153
Select 2An organization is using VMware Tanzu Mission Control (TMC) to manage its Kubernetes environments. The administrator wants to enforce specific security and resource usage standards across all clusters while allowing developers to have flexibility within those boundaries. Which role do policies play in achieving this goal?
- A
Policies enable centralized governance by defining constraints and configurations across multiple clusters.
- B
Policies allow developers to bypass cluster-level restrictions for faster development cycles.
- C
Policies can be used to enforce security standards, such as restricting container privileges and defining network ingress rules.
- D
Policies provide a mechanism to monitor and report on policy violations without actively enforcing them.
- E
Policies are applied only at the namespace level and cannot be enforced globally across clusters.
Show answer and explanation
Correct answers: A, C
Explanation
Policies in VMware Tanzu Mission Control are a powerful mechanism for centralized management, allowing administrators to enforce consistent configurations and security standards across Kubernetes environments. They provide governance and compliance by defining constraints, such as resource quotas or security rules, while still enabling developers to operate within those defined boundaries. These policies can operate at various levels, including globally across clusters, ensuring broad applicability and control.
- A. Correct.
Policies enable centralized governance by creating and enforcing consistent configurations and constraints across multiple clusters, ensuring compliance with organizational standards. This is a key role of policies in Tanzu Mission Control.
- B. Incorrect.
This statement is incorrect because policies are designed to enforce constraints, and they do not allow developers to bypass restrictions. Instead, they define boundaries for developers to work within.
- C. Correct.
Policies can indeed enforce security standards, such as restricting container privileges, setting network ingress rules, or ensuring resource quotas. This is one of their primary roles.
- D. Incorrect.
While some policies provide monitoring and reporting capabilities, their primary role in Tanzu Mission Control is active enforcement, not just passive monitoring.
- E. Incorrect.
Policies in Tanzu Mission Control can be applied at multiple levels, including globally across clusters, not just at the namespace level. This statement is incorrect.