What can you use to specify which assets to check against IOMs and Image assessment...

When using theFalcon Kubernetes Admission Controller, CrowdStrike allows administrators to precisely scope which Kubernetes assets are evaluated againstIndicators of Misconfiguration (IOMs)andImage Assessment policiesby usingboth namespaces and pod or service labels.

Namespaces provide a logical boundary within Kubernetes clusters, often representing environments such as dev, staging, or production. Labels add further granularity by identifying workloads based on application, team ownership, or deployment tier. By combining namespaces and labels, security teams can enforce policies with fine-grained control while minimizing unintended enforcement.

Using only namespaces or only labels limits flexibility and may lead to over- or under-enforcement. CrowdStrike documentation supports the combined approach as a best practice for scalable and precise policy enforcement in Kubernetes environments.

Therefore, the correct answer isNamespaces and Pod or Service labels.