Question 1

A Kubernetes cluster tenant can launch privileged pods in contravention of the restricted Pod Security Standard mandated for cluster tenants and enforced by the built-in PodSecurity admission controller. The tenant has full CRUD permissions on the namespace object and the namespaced resources. How did the tenant achieve this?

Options :

A : The scope of the tenant role means privilege escalation is impossible.

B : By tampering with the namespace labels.

C : By deleting the PodSecurity admission controller deployment running in their namespace.

D : By using higher-level access credentials obtained reading secrets from another namespace.

Answer: B

Question 2

Which component of the 4Cs of Cloud Native Security is directly responsible for implementing security policies and controls within the application code to prevent vulnerabilities?

Options :

A : Code Security

B : Container Security

C : Cloud Infrastructure Security

D : Cluster Security

Answer: A

Question 3

Why is configuring access controls on a Kubernetes image repository crucial for platform security?

Options :

A : To optimize the distribution of images across multiple clusters

B : To ensure only authorized personnel and systems can push or pull images

C : To enhance the speed of image deployment to production environments

D : To facilitate the integration of the repository with external monitoring tools

Answer: B

Question 4

Why is the ‘Restricted’ policy in Kubernetes Pod Security Standards important for handling sensitive workloads?

Options :

A : To optimize resource allocation for sensitive applications

B : To implement strict security constraints that minimize the risk of security breaches in sensitive applications

C : To increase the computational speed of applications handling sensitive data

D : To ensure high availability of sensitive applications in the cluster

Answer: B

Question 5

Why is network segmentation using Network Policies important in a Kubernetes cluster?

Options :

A : To optimize the network performance for high-traffic applications

B : To control and limit the network communication between different pods for security purposes

C : To manage the distribution of external traffic to different services

D : To automate the process of scaling network resources based on demand

Answer: B

Confidently Practice Online with Free KCSA Exam Cram

Buying Options: