# Which of the following is NOT a valid way to secure cert-manager's webhook?

cert-manager, Hard (Expert), Security. https://k8wiz.com/uquiz/which-of-the-following-is-not-a-valid-way-to-secure-cert-managers-webhook

- A. Using network policies
- B. Using RBAC
- C. Using a service mesh
- D. Using a password

**Answer:** Using a password

**Explanation:** Using a password is not a valid way to secure cert-manager's webhook. The webhook is secured using TLS certificates for authentication and RBAC for authorization. Network policies and service meshes can also be used to control traffic to the webhook, but password authentication is not supported.