Question 1

Why is setting Pod Security Admissions (PSA) to ‘audit’ mode beneficial during the initial implementation phase?

Options :

A : To improve the data processing efficiency within the cluster

B : To manage the allocation of resources based on security policy evaluation

C : To record policy violations for assessment, allowing administrators to fine-tune security policies before enforcement

D : To optimize the distribution of network traffic among microservices

Answer: C

Question 2

Which security practice is most effective in preventing unauthorized or compromised container images from being deployed in a Kubernetes environment?

Options :

A : Regularly updating Kubernetes and its dependencies

B : Implementing continuous integration/continuous deployment (CI/CD) pipelines

C : Enforcing image scanning and vulnerability assessment

D : Using network policies to control pod-to-pod communication

Answer: C

Question 3

Why is network segmentation using Network Policies important in a Kubernetes cluster?

Options :

A : To optimize the network performance for high-traffic applications

B : To control and limit the network communication between different pods for security purposes

C : To manage the distribution of external traffic to different services

D : To automate the process of scaling network resources based on demand

Answer: B

Question 4

What is the primary purpose of configuring audit logs in a Kubernetes environment?

Options :

A : To enhance the load balancing efficiency across different nodes

B : To track and record actions taken on the Kubernetes API for security monitoring and analysis

C : To automatically adjust pod scaling based on logged events

D : To optimize the allocation of storage resources in the cluster

Answer: B

Question 5

Why is implementing centralized logging in a Kubernetes environment considered critical for security observability?

Options :

A : To enhance data processing speed across microservices

B : To manage the distribution of traffic among services

C : To enable comprehensive tracking and analysis of security incidents across the cluster

D : To optimize resource allocation based on log analysis

Answer: C

Confidently Practice Online with Free KCSA Exam Cram