2V0-71.23 Question 344
Select 2An organization is using VMware Tanzu Mission Control (TMC) to manage its Kubernetes clusters across multiple cloud environments. The security team has requested that all clusters be compliant with CIS Kubernetes Benchmark standards. Which two actions should the administrator take using Tanzu Mission Control to ensure compliance?
- A
Enable the CIS Benchmark policy pack for all clusters using Tanzu Mission Control.
- B
Deploy a custom security script to enforce CIS compliance across clusters.
- C
Use Tanzu Mission Control to run an inspection report to identify CIS compliance issues.
- D
Manually configure each cluster to adhere to the CIS Benchmark standards.
- E
Apply a Tanzu Mission Control policy to automatically remediate identified CIS compliance issues.
Show answer and explanation
Correct answers: A, C
Explanation
To ensure CIS compliance across Kubernetes clusters, administrators using VMware Tanzu Mission Control should leverage built-in tools such as the CIS Benchmark policy pack and inspection reports. These tools provide centralized, scalable, and efficient ways to evaluate and enforce compliance. Manually configuring clusters or deploying custom scripts is unnecessary when TMC's built-in capabilities are available. Automatic remediation is not supported directly by TMC, requiring administrators to take manual action based on inspection results.
- A. Correct.
Tanzu Mission Control offers predefined policy packs, such as the CIS Benchmark policy, to help ensure cluster compliance with security standards. Enabling this policy for all clusters is an appropriate action.
- B. Incorrect.
While custom scripts might enforce compliance, Tanzu Mission Control provides built-in capabilities for CIS Benchmark compliance, making custom scripting unnecessary in this context.
- C. Correct.
Tanzu Mission Control provides inspection capabilities to evaluate clusters against compliance standards like the CIS Benchmark. Running an inspection report is a valid step to identify security gaps.
- D. Incorrect.
Manually configuring each cluster for compliance is time-consuming and error-prone, especially when managing multiple clusters across environments. Tanzu Mission Control provides centralized tools to simplify the process.
- E. Incorrect.
Tanzu Mission Control does not automatically remediate issues after identifying them. Administrators must manually apply recommendations or use custom automation tools for remediation.