2V0-71.23 Question 343
Select 2Your organization uses VMware Tanzu for Kubernetes Operations to manage a multi-cluster Kubernetes environment. Security policies need to be enforced to restrict access to sensitive namespaces and ensure only authorized users can deploy workloads. Which actions should you take to achieve this using Tanzu Mission Control?
- A
Define role-based access control (RBAC) rules for the specific namespaces.
- B
Create a security policy using Tanzu Mission Control that applies to the clusters hosting the namespaces.
- C
Use Tanzu Service Mesh to encrypt traffic within the sensitive namespaces.
- D
Install a third-party Kubernetes security tool to manage access control.
Show answer and explanation
Correct answers: A, B
Explanation
To secure sensitive namespaces in a Kubernetes environment managed by Tanzu, you need to leverage Tanzu Mission Control's built-in capabilities. By setting up RBAC rules and applying security policies, you can restrict access to authorized users and enforce workload deployment controls. Tanzu Service Mesh and third-party tools are not directly relevant to this scenario as the required functionality is already provided by Tanzu Mission Control.
- A. Correct.
Defining RBAC rules is essential to control access to Kubernetes resources. Tanzu Mission Control allows you to configure RBAC at a granular level for specific namespaces.
- B. Correct.
Tanzu Mission Control supports creating security policies that can be applied to clusters or namespaces, ensuring consistent enforcement of access and operational rules.
- C. Incorrect.
Tanzu Service Mesh is primarily used for managing service-to-service communication and encryption, but it does not directly enforce namespace access control.
- D. Incorrect.
Tanzu Mission Control provides built-in tools for managing security and access control, so installing a third-party tool is not necessary unless there are specific additional requirements.