問題文
A platform team is drawing up its first security plan for a new Kubernetes environment and structures the work around the 4Cs of Cloud Native Security: Cloud, Cluster, Container and Code. A developer asks why the team cannot simply start with the Code layer. Which statement correctly describes how the four layers relate to one another?
選択肢
- The four layers are entirely independent of one another, so an organization can pick whichever single layer it finds easiest to invest in and still reach the same overall level of protection.
- Each layer builds on the one outside it, so a weakness in an outer layer such as Cloud cannot be fully compensated for by hardening the layers inside it.
- Only the Code layer matters, so a team that writes flawless application code has nothing left to do at the Cloud, Cluster or Container layers, and every incident can be traced back to an application defect.
- The layers describe a strict deployment order, so all Cluster configuration must be completed before any Cloud account setting is chosen, and the Code layer is reviewed only after the other three have been signed off.