Linux Foundation KCSA Exam Questions Instant Access

Question 1

In order to reduce the attack surface of the Scheduler, which default parameter should be set to false?

A--scheduler-name

B--profiling

C--secure-kubeconfig

D--bind-address

Answer : B

Question 2

Why does the default base64 encoding that Kubernetes applies to the contents of Secret resources provide inadequate protection?

ABase64 encoding is vulnerable to brute-force attacks.

BBase64 encoding relies on a shared key which can be easily compromised.

CBase64 encoding does not encrypt the contents of the Secret, only obfuscates it.

DBase64 encoding is not supported by all Secret Stores.

Answer : C

Question 3

Which information does a user need to verify a signed container image?

AThe image's SHA-256 hash and the private key of the signing authority.

BThe image's digital signature and the private key of the signing authority.

CThe image's SHA-256 hash and the public key of the signing authority.

DThe image's digital signature and the public key of the signing authority.

Answer : D

Question 4

What is Grafana?

AA cloud-native distributed tracing system for monitoring microservices architectures.

BA container orchestration platform for managing and scaling applications.

CA platform for monitoring and visualizing time-series data.

DA cloud-native security tool for scanning and detecting vulnerabilities in Kubernetes clusters.

Answer : C

Question 5

Which of the following statements on static Pods is true?

AThe kubelet can run static Pods that span multiple nodes, provided that it has the necessary privileges from the API server.

BThe kubelet can run a maximum of 5 static Pods on each node.

CThe kubelet schedules static Pods local to its node without going through the kube-scheduler, making tracking and managing them difficult.

DThe kubelet only deploys static Pods when the kube-scheduler is unresponsive.

Answer : C

Question 6

In which order are the validating and mutating admission controllers run while the Kubernetes API server processes a request?

AThe order of execution varies and is determined by the cluster configuration.

BValidating admission controllers run before mutating admission controllers.

CValidating and mutating admission controllers run simultaneously.

DMutating admission controllers run before validating admission controllers.

Answer : D

Question 7

What is a multi-stage build?

AA build process that involves multiple developers collaborating on building an image.

BA build process that involves multiple repositories for storing container images.

CA build process that involves multiple containers running simultaneously to speed up the image creation.

DA build process that involves multiple stages of image creation, allowing for smaller, optimized images.

Answer : D

Linux Foundation Kubernetes and Cloud Native Security Associate KCSA Exam Questions