# 런타임 및 클러스터 보안 (DevOps) > Pod Security Standards, Falco, eBPF 런타임 보안, admission controllers (OPA, Kyverno), 정책 적용 - 24 면접 질문 - Senior - [면접 질문: DevOps](https://sharpskill.dev/ko/technologies/devops/interview-questions.md) ## 1. Kubernetes가 정의하는 Pod Security Standards의 세 가지 레벨은 무엇입니까? **답변** Kubernetes는 세 가지 Pod Security Standards 레벨을 정의합니다: Privileged (제한 없음), Baseline (최소한의 제한, hostNetwork 또는 privileged container와 같은 알려진 권한 상승을 차단), Restricted (매우 제한적, runAsNonRoot, seccomp 등 하드닝 모범 사례를 따름). 이러한 레벨을 통해 애플리케이션 요구사항에 따른 점진적인 보안 도입이 가능합니다. ## 2. kubectl로 namespace에 Pod Security Standards의 Baseline 레벨을 적용하려면 어떻게 합니까? **답변** namespace에 pod-security.kubernetes.io 레이블을 사용하면 Pod Security Standards를 활성화할 수 있습니다. 세 가지 모드가 있습니다: enforce (차단), warn (경고), audit (로그 기록). kubectl label 명령으로 원하는 레벨과 버전으로 이러한 레이블을 적용할 수 있습니다. ## 3. Pod Security Standards의 Baseline과 Restricted 레벨의 주요 차이점은 무엇입니까? **답변** Restricted 레벨은 runAsNonRoot를 강제로 적용하여 root로 실행하는 것을 금지합니다. 반면 Baseline은 root를 허용하지만 권한 상승을 차단합니다. Restricted는 또한 capabilities (drop ALL), seccomp (RuntimeDefault), 허용되는 volume에 대한 제약을 추가합니다. 이는 중요한 워크로드에 권장되는 레벨입니다. ## 21개 추가 질문 이용 가능 - Kubernetes 런타임 보안에서 Falco의 주요 역할은 무엇입니까? - Linux 커널을 수정하지 않고 Falco가 시스템 이벤트를 모니터링할 수 있게 하는 기술은 무엇입니까? 무료로 가입하기: https://sharpskill.dev/ko/login ## 기타 DevOps 면접 주제 - [버전 관리 & Git](https://sharpskill.dev/ko/technologies/devops/interview-questions/version-control-git.md): 20개 질문, Junior - [Linux 기초](https://sharpskill.dev/ko/technologies/devops/interview-questions/linux-fundamentals.md): 22개 질문, Junior - [Shell Scripting & Bash](https://sharpskill.dev/ko/technologies/devops/interview-questions/shell-scripting-bash.md): 20개 질문, Mid-Level - [네트워킹 기초](https://sharpskill.dev/ko/technologies/devops/interview-questions/networking-basics.md): 22개 질문, Junior - [Docker 기초](https://sharpskill.dev/ko/technologies/devops/interview-questions/docker-fundamentals.md): 24개 질문, Junior - [CI/CD 기초](https://sharpskill.dev/ko/technologies/devops/interview-questions/ci-cd-fundamentals.md): 18개 질문, Junior - [GitHub Actions](https://sharpskill.dev/ko/technologies/devops/interview-questions/github-actions.md): 22개 질문, Mid-Level - [GitLab CI/CD](https://sharpskill.dev/ko/technologies/devops/interview-questions/gitlab-ci.md): 22개 질문, Mid-Level - [Jenkins](https://sharpskill.dev/ko/technologies/devops/interview-questions/jenkins.md): 22개 질문, Mid-Level - [Kubernetes 기초](https://sharpskill.dev/ko/technologies/devops/interview-questions/kubernetes-basics.md): 26개 질문, Mid-Level - [Kubernetes 네트워킹](https://sharpskill.dev/ko/technologies/devops/interview-questions/kubernetes-networking.md): 24개 질문, Mid-Level - [Kubernetes 고급](https://sharpskill.dev/ko/technologies/devops/interview-questions/kubernetes-advanced.md): 24개 질문, Mid-Level - [Ingress & API Gateway](https://sharpskill.dev/ko/technologies/devops/interview-questions/ingress-api-gateway.md): 20개 질문, Mid-Level - [Terraform 기초](https://sharpskill.dev/ko/technologies/devops/interview-questions/terraform-basics.md): 22개 질문, Mid-Level - [Terraform 고급](https://sharpskill.dev/ko/technologies/devops/interview-questions/terraform-advanced.md): 22개 질문, Mid-Level - [Ansible & Configuration Management](https://sharpskill.dev/ko/technologies/devops/interview-questions/ansible-configuration.md): 20개 질문, Mid-Level - [AWS 핵심](https://sharpskill.dev/ko/technologies/devops/interview-questions/aws-essentials.md): 26개 질문, Mid-Level - [Azure 기초](https://sharpskill.dev/ko/technologies/devops/interview-questions/azure-fundamentals.md): 22개 질문, Mid-Level - [GCP 기초](https://sharpskill.dev/ko/technologies/devops/interview-questions/gcp-fundamentals.md): 22개 질문, Mid-Level - [모니터링과 Prometheus](https://sharpskill.dev/ko/technologies/devops/interview-questions/monitoring-prometheus.md): 22개 질문, Mid-Level - [Logging & ELK Stack](https://sharpskill.dev/ko/technologies/devops/interview-questions/logging-elk.md): 20개 질문, Mid-Level - [알림 및 인시던트 대응](https://sharpskill.dev/ko/technologies/devops/interview-questions/alerting-incident-response.md): 20개 질문, Mid-Level - [Cloud Identity & Secrets](https://sharpskill.dev/ko/technologies/devops/interview-questions/cloud-identity-secrets.md): 22개 질문, Mid-Level - [CI/CD 파이프라인 보안](https://sharpskill.dev/ko/technologies/devops/interview-questions/cicd-pipeline-security.md): 20개 질문, Mid-Level - [Helm & Kubernetes](https://sharpskill.dev/ko/technologies/devops/interview-questions/helm-kubernetes.md): 20개 질문, Mid-Level - [Container Supply Chain Security](https://sharpskill.dev/ko/technologies/devops/interview-questions/container-supply-chain.md): 22개 질문, Senior - [Service Mesh & Istio](https://sharpskill.dev/ko/technologies/devops/interview-questions/service-mesh-istio.md): 24개 질문, Senior - [GitOps & ArgoCD](https://sharpskill.dev/ko/technologies/devops/interview-questions/gitops-argocd.md): 22개 질문, Senior - [Progressive Delivery](https://sharpskill.dev/ko/technologies/devops/interview-questions/progressive-delivery.md): 20개 질문, Senior - [분산 옵저버빌리티](https://sharpskill.dev/ko/technologies/devops/interview-questions/observability-distributed.md): 22개 질문, Senior - [Disaster Recovery & Backup](https://sharpskill.dev/ko/technologies/devops/interview-questions/disaster-recovery.md): 20개 질문, Senior - [성능 최적화](https://sharpskill.dev/ko/technologies/devops/interview-questions/performance-optimization.md): 22개 질문, Senior - [클라우드 비용 최적화](https://sharpskill.dev/ko/technologies/devops/interview-questions/infrastructure-cost.md): 20개 질문, Senior - [SRE 원칙](https://sharpskill.dev/ko/technologies/devops/interview-questions/sre-principles.md): 24개 질문, Senior - [Chaos Engineering](https://sharpskill.dev/ko/technologies/devops/interview-questions/chaos-engineering.md): 20개 질문, Senior - [Platform Engineering](https://sharpskill.dev/ko/technologies/devops/interview-questions/platform-engineering.md): 22개 질문, Senior --- Source: SharpSkill (https://sharpskill.dev), tech interview preparation for your real stack. HTML version of this page: https://sharpskill.dev/ko/technologies/devops/interview-questions/runtime-cluster-security