Which control reduces risky containers in Kubernetes?

Problem Statement

PSS policies block privileged containers, host mounts, and risky capabilities. Start with baseline and aim for restricted for most workloads.

SolutionRead Only

kubectl label ns prod pod-security.kubernetes.io/enforce=restricted

This question appears in the following practice sets: