Which is the correct option to forward logs from Tanzu Kubernetes Grid clusters to Elastic, Kafka, Splunk or an HTTP endpoint?
A. No action is required. Tanzu Kubernetes Grid automatically forwards the logfiles to syslog.
B. Use the kubectl get logs command to forward the logs
C. Deploy the fluent bit plugin to vRealize Log Insight
D. Deploy the fluent bit plugin to vRealize Log Insight
Which step must be taken to enable Kubernetes auditing on a Tanzu Kubernetes cluster?
A. Set the ENABLE_AUDIT_LOGGING variable to ‘true’ before deploying the cluster
B. Run systemctl start auditd andand systemctl enable auditd on master node
C. Audit is enabled by default on every Tanzu cluster
D. Edit /etc/kubernetes/audit-policy.yaml and set ENABLE_AUDIT variable to ‘1’ on master node
What is the default authentication implemented in Tanzu Kubernetes Grid?
A. Keycloak
B. Vault
C. Dex and Gangway
D. kube-oidc-proxy
A Tanzu Mission Control administrator would like to enforce the following container controls:
Require Digest.
Name-Tag Allowlist.
To which type of policies do these controls belong to?
A. Security
B. Registry
C. Access
D. Network
Which role is required to enable data protection in Tanzu Mission Control?
A. cluster.admin
B. clusters.admin
C. cluster.edit
D. cluster.manage
Which two roles are required to attach clusters in Tanzu Mission Control? (Choose two.)
A. cluster.attach.admin
B. clustergroup.attach.admin
C. clustergroup.edit
D. clusters.admin
E. cluster.admin
What role is used to run cluster inspection on Tanzu Mission Control console?
A. Cluster.edit role
B. Credential.admin role
C. Credential.view role
D. Create role
What us the definition of Tanzu Kubernetes Grid Instance?
A. Management cluster and Tanzu Kubernetes clusters
B. Management cluster and Tanzu Operations
C. Management cluster and Tanzu Build Service
D. Management cluster and kubeadm
Which prerequisite must be configured before starting the Tanzu workload management enablement wizard?
A. Content library
B. Tanzu Mission Control
C. Storage policy
D. Tanzu Build Service
Which component can intercept requests to the Kubernetes API?
A. Network Policy
B. RBAC Authorization
C. Pod Security Policies
D. Admission Controllers