Function associated with Kubernetes Security Contexts.

Function associated with Kubernetes Security Contexts.

• A. Scheduling containers on nodes
• B. Defining container or pod level security settings
• C. Managing network policies
• D. Enforcing PodSecurityPolicies

Answer: (B)

Security contexts specify the security attributes applied to a container or pod, such as which user the process runs as, whether the root filesystem is read-only, and which capabilities or SELinux/AppArmor labels are allowed or dropped. These settings define the runtime security posture and enforce least-privilege execution for containers, shaping how they operate inside the pod. Scheduling containers on nodes is handled by the scheduler using node selectors, taints, tolerations, and affinity rules, not by security contexts. Managing network policies controls which pods can talk to which—it's about network traffic, not container runtime security settings. Enforcing PodSecurityPolicies (or Pod Security Standards) governs overarching policy constraints on pods, but security contexts are the specific per-container or per-pod security attributes you configure inside the Pod spec to control privileges and capabilities.

Security contexts specify the security attributes applied to a container or pod, such as which user the process runs as, whether the root filesystem is read-only, and which capabilities or SELinux/AppArmor labels are allowed or dropped. These settings define the runtime security posture and enforce least-privilege execution for containers, shaping how they operate inside the pod.

Scheduling containers on nodes is handled by the scheduler using node selectors, taints, tolerations, and affinity rules, not by security contexts. Managing network policies controls which pods can talk to which—it's about network traffic, not container runtime security settings. Enforcing PodSecurityPolicies (or Pod Security Standards) governs overarching policy constraints on pods, but security contexts are the specific per-container or per-pod security attributes you configure inside the Pod spec to control privileges and capabilities.