Palo Alto Networks Certified Cloud Security Engineer (PCCSE)Cloud Workload Protection Platform (CWPP)Easy
Which of the following is a key benefit of deploying Prisma Cloud Defenders as daemonsets in a Kubernetes environment?
- AThey provide centralized logging for all container activity.
- BThey ensure a Defender instance runs on every eligible node in the cluster.
- CThey automatically scale horizontally based on pod CPU utilization.
- DThey enable serverless function protection for Fargate instances.
Show answer & explanationAnswer & explanation
Correct answer: B. They ensure a Defender instance runs on every eligible node in the cluster.
A Kubernetes DaemonSet ensures that all (or some) eligible nodes run a copy of a pod. This deployment strategy is ideal for Prisma Cloud Defenders, as it guarantees that every node in the cluster is protected.
Why the other options are wrong
- A. While Defenders collect logs, DaemonSets are a deployment strategy, not a logging solution.
- C. Horizontal Pod Autoscalers (HPAs) handle horizontal scaling, not DaemonSets.
- D. DaemonSets are for node-level deployments in Kubernetes, not directly for Fargate serverless functions.
Kubernetes DaemonSet
A Kubernetes object that ensures a copy of a Pod is running on all (or some) nodes in a cluster.
- Guarantees node-level agent deployment.
- Automatically deploys to new nodes.
- Used for infrastructure-level services.
Memory trick: DaemonSets are like security guards on every node's beat.