Questions

1. If you need to edit an included Falco rule, which file would you edit?

   A. falco.yaml

   B. falco_rules.yaml

   C. falco_rules.changes.yaml

   D. falco_rules.local.yaml

2. Which of the following is a common log forwarder used by Kubernetes?

   A. Kube-forwarder.

   B. Fluentd.

   C. Forwarder.

   D. Kubernetes doesn't use forwarders.

3. What is the product that provides a way to present logs using visualizations and dashboards when you deploy the EFK stack?

   A. Fluentd

   B. Elasticsearch

   C. Kibana

   D. Excel

4. Which of the following tools forwards only Falco logs to a central logging system?

   A. Falco.

   B. Falcosidekick.

   C. The Kubernetes API server.

   D. All products forward every log, not just the Falco logs.

5. What is the name of the object in Falco that allows you to create a collection of items?

   A. Lists

   B. Rules

   C. Arrays

   D. Collections