Configuration Use non-root containers Understand pod security policies Understand network security policies