33Explain macOS platform security: Gatekeeper, quarantine and notarisation, SIP and the sealed volume, TCC, and how attackers get around them.▼mediumNewAppleCrowdStrikeMicrosoft◆ premiumMost Mac compromises do not break these controls. They persuade the user to step around them, or borrow the permissions of an app that already has them.Open full answer →
35How does Kubernetes admission control enforce security policy, and when do you use Pod Security Admission, CEL policies or webhooks?▼hardNewGoogleAmazonMicrosoft◆ premiumRBAC decides who may create a pod; admission decides what kind of pod may exist. The scored answer layers the built-in options, handles webhook failure modes and remembers that the admission path is itself attack surface.Open full answer →