# Runtime ve Cluster Güvenliği (DevOps)

> Pod Security Standards, Falco, eBPF runtime güvenliği, admission controller'lar (OPA, Kyverno), policy uygulama

- 24 mülakat soruları
- Senior
- [Mülakat Soruları: DevOps](https://sharpskill.dev/tr/technologies/devops/mulakat-sorulari.md)

## 1. Kubernetes tarafından tanımlanan üç Pod Security Standards seviyesi nedir?

**Cevap**

Kubernetes üç Pod Security Standards seviyesi tanımlar: Privileged (kısıtlama yok), Baseline (minimum kısıtlayıcı, hostNetwork veya privileged container'lar gibi bilinen ayrıcalık yükseltmelerini engeller) ve Restricted (yüksek derecede kısıtlayıcı, runAsNonRoot, seccomp vb. ile hardening best practice'lerini takip eder). Bu seviyeler, uygulama ihtiyaçlarına göre kademeli güvenlik benimsenmesini sağlar.

## 2. Pod Security Standards'ın Baseline seviyesi kubectl ile bir namespace'e nasıl uygulanır?

**Cevap**

Namespace üzerinde pod-security.kubernetes.io etiketlerini kullanmak Pod Security Standards'ı etkinleştirir. Üç mod vardır: enforce (engeller), warn (uyarır) ve audit (kaydeder). kubectl label komutu, istenen seviye ve sürümle bu etiketleri uygular.

## 3. Pod Security Standards'ın Baseline ve Restricted seviyeleri arasındaki temel fark nedir?

**Cevap**

Restricted seviyesi runAsNonRoot'u zorunlu kılar ve root olarak çalıştırmayı yasaklar, Baseline ise root'a izin verir ancak ayrıcalık yükseltmelerini engeller. Restricted ayrıca capabilities (drop ALL), seccomp (RuntimeDefault) ve izin verilen volume'ler üzerinde kısıtlamalar ekler. Kritik workload'lar için önerilen seviyedir.

## 21 soru daha mevcut

- Falco'nun Kubernetes runtime güvenliğindeki ana rolü nedir?
- Falco'nun Linux kernel'i değiştirmeden sistem olaylarını izlemesini hangi teknoloji sağlar?

Ücretsiz kaydol: https://sharpskill.dev/tr/login

## Diğer DevOps mülakat konuları

- [Sürüm Kontrolü & Git](https://sharpskill.dev/tr/technologies/devops/mulakat-sorulari/version-control-git.md): 20 soru, Junior
- [Linux Temelleri](https://sharpskill.dev/tr/technologies/devops/mulakat-sorulari/linux-fundamentals.md): 22 soru, Junior
- [Shell Scripting & Bash](https://sharpskill.dev/tr/technologies/devops/mulakat-sorulari/shell-scripting-bash.md): 20 soru, Mid-Level
- [Networking Temelleri](https://sharpskill.dev/tr/technologies/devops/mulakat-sorulari/networking-basics.md): 22 soru, Junior
- [Docker Temelleri](https://sharpskill.dev/tr/technologies/devops/mulakat-sorulari/docker-fundamentals.md): 24 soru, Junior
- [CI/CD Temelleri](https://sharpskill.dev/tr/technologies/devops/mulakat-sorulari/ci-cd-fundamentals.md): 18 soru, Junior
- [GitHub Actions](https://sharpskill.dev/tr/technologies/devops/mulakat-sorulari/github-actions.md): 22 soru, Mid-Level
- [GitLab CI/CD](https://sharpskill.dev/tr/technologies/devops/mulakat-sorulari/gitlab-ci.md): 22 soru, Mid-Level
- [Jenkins](https://sharpskill.dev/tr/technologies/devops/mulakat-sorulari/jenkins.md): 22 soru, Mid-Level
- [Kubernetes Temelleri](https://sharpskill.dev/tr/technologies/devops/mulakat-sorulari/kubernetes-basics.md): 26 soru, Mid-Level
- [Kubernetes Networking](https://sharpskill.dev/tr/technologies/devops/mulakat-sorulari/kubernetes-networking.md): 24 soru, Mid-Level
- [İleri Düzey Kubernetes](https://sharpskill.dev/tr/technologies/devops/mulakat-sorulari/kubernetes-advanced.md): 24 soru, Mid-Level
- [Ingress & API Gateway](https://sharpskill.dev/tr/technologies/devops/mulakat-sorulari/ingress-api-gateway.md): 20 soru, Mid-Level
- [Terraform Temelleri](https://sharpskill.dev/tr/technologies/devops/mulakat-sorulari/terraform-basics.md): 22 soru, Mid-Level
- [İleri Terraform](https://sharpskill.dev/tr/technologies/devops/mulakat-sorulari/terraform-advanced.md): 22 soru, Mid-Level
- [Ansible & Configuration Management](https://sharpskill.dev/tr/technologies/devops/mulakat-sorulari/ansible-configuration.md): 20 soru, Mid-Level
- [AWS Temelleri](https://sharpskill.dev/tr/technologies/devops/mulakat-sorulari/aws-essentials.md): 26 soru, Mid-Level
- [Azure Temelleri](https://sharpskill.dev/tr/technologies/devops/mulakat-sorulari/azure-fundamentals.md): 22 soru, Mid-Level
- [GCP Temelleri](https://sharpskill.dev/tr/technologies/devops/mulakat-sorulari/gcp-fundamentals.md): 22 soru, Mid-Level
- [Monitoring ve Prometheus](https://sharpskill.dev/tr/technologies/devops/mulakat-sorulari/monitoring-prometheus.md): 22 soru, Mid-Level
- [Logging & ELK Stack](https://sharpskill.dev/tr/technologies/devops/mulakat-sorulari/logging-elk.md): 20 soru, Mid-Level
- [Alerting ve Incident Response](https://sharpskill.dev/tr/technologies/devops/mulakat-sorulari/alerting-incident-response.md): 20 soru, Mid-Level
- [Cloud Identity & Secrets](https://sharpskill.dev/tr/technologies/devops/mulakat-sorulari/cloud-identity-secrets.md): 22 soru, Mid-Level
- [CI/CD Pipeline Güvenliği](https://sharpskill.dev/tr/technologies/devops/mulakat-sorulari/cicd-pipeline-security.md): 20 soru, Mid-Level
- [Helm & Kubernetes](https://sharpskill.dev/tr/technologies/devops/mulakat-sorulari/helm-kubernetes.md): 20 soru, Mid-Level
- [Container Supply Chain Security](https://sharpskill.dev/tr/technologies/devops/mulakat-sorulari/container-supply-chain.md): 22 soru, Senior
- [Service Mesh & Istio](https://sharpskill.dev/tr/technologies/devops/mulakat-sorulari/service-mesh-istio.md): 24 soru, Senior
- [GitOps & ArgoCD](https://sharpskill.dev/tr/technologies/devops/mulakat-sorulari/gitops-argocd.md): 22 soru, Senior
- [Progressive Delivery](https://sharpskill.dev/tr/technologies/devops/mulakat-sorulari/progressive-delivery.md): 20 soru, Senior
- [Dağıtık Gözlemlenebilirlik](https://sharpskill.dev/tr/technologies/devops/mulakat-sorulari/observability-distributed.md): 22 soru, Senior
- [Disaster Recovery & Backup](https://sharpskill.dev/tr/technologies/devops/mulakat-sorulari/disaster-recovery.md): 20 soru, Senior
- [Performans Optimizasyonu](https://sharpskill.dev/tr/technologies/devops/mulakat-sorulari/performance-optimization.md): 22 soru, Senior
- [Bulut Maliyet Optimizasyonu](https://sharpskill.dev/tr/technologies/devops/mulakat-sorulari/infrastructure-cost.md): 20 soru, Senior
- [SRE Prensipleri](https://sharpskill.dev/tr/technologies/devops/mulakat-sorulari/sre-principles.md): 24 soru, Senior
- [Chaos Engineering](https://sharpskill.dev/tr/technologies/devops/mulakat-sorulari/chaos-engineering.md): 20 soru, Senior
- [Platform Engineering](https://sharpskill.dev/tr/technologies/devops/mulakat-sorulari/platform-engineering.md): 22 soru, Senior

---

Source: SharpSkill (https://sharpskill.dev), tech interview preparation for your real stack.
HTML version of this page: https://sharpskill.dev/tr/technologies/devops/mulakat-sorulari/runtime-cluster-security