Your Organization Recently Adopted a Container-Based Workflow for Application Development

question 4

Multiple Choice

Your organization recently adopted a container-based workflow for application development. Your team develops numerous applications that are deployed continuously through an automated build pipeline to a Kubernetes cluster in the production environment. The security auditor is concerned that developers or operators could circumvent automated testing and push code changes to production without approval. What should you do to enforce approvals?

• A) Configure the build system with protected branches that require pull request approval.
• B) Use an Admission Controller to verify that incoming requests originate from approved sources.
• C) Leverage Kubernetes Role-Based Access Control (RBAC) to restrict access to only approved users.
• D) Enable binary authorization inside the Kubernetes cluster and configure the build pipeline as an attestor.

---

Definitions:

Remove Risk Items

The process of eliminating objects or substances that could cause harm or pose a danger, particularly in a healthcare or therapeutic setting.

Sentinel Event

An unexpected occurrence involving death or serious physical or psychological injury, or the risk thereof, which necessitates immediate investigation and response.

Suicidal Tendencies

Patterns of thoughts or behaviors that indicate a higher risk of attempting suicide, often seen in individuals with a history of suicidal thoughts or attempts.

Shame

A painful feeling arising from the consciousness of something dishonorable, improper, or ridiculous done by oneself or another.