ISC2 Certified Cloud Security Professional (CCSP) Practice Question

A Kubernetes Deployment encapsulates one or more identical Pods and manages their life-cycle through ReplicaSets. It provides declarative, versioned updates that support rolling upgrades and built-in rollback to previous revisions, allowing each microservice to be deployed and updated independently. RBAC permissions can be bound to the Deployment's ServiceAccount to enforce least privilege at runtime. A standalone Pod cannot manage rollbacks or horizontal scaling. A DaemonSet schedules exactly one Pod per node, which is unnecessary for most microservices. A StatefulSet maintains stable network identities and ordered deployment, features typically required only for stateful workloads, not stateless microservices that need rapid rollout and rollback.