A.all Defenders set in read-only mode before execution of the rolling upgrade

B.a second location where you can install the Console

C.additional workload licenses are required to perform the rolling upgrade

D.manual installation of the latest twistcli tool prior to the rolling upgrade

E.an existing Console at version n-1

A.Block

B.Prevent

C.Alert

D.Fail

A.Ensure functions are not overly permissive.

B.Ensure compliant Docker daemon configuration

C.Ensure images are created with a non-root user

D.Ensure host devices are not directly exposed to containers.

A.create a Container CNAF policy, targeted at a specific resource, and they should set "Explicitly allowed inbound IP sources" to the IP address of the pod.

B.create a Container CNAF policy, targeted at a specific resource, check the box for XSS attack protection and set the action to alert

C.create a Host CNAF policy targeted at a specific resource, check the box for XSS attack protection and set the action to "prevent"

D.create a Container CNAF policy, targeted at a specific resource, check the box for XSS attack protection and set the action to prevent