Linux Foundation KCSA Exam Questions Instant Access

Question 1

What information is stored in etcd?

AEtcd manages the configuration data, state data, and metadata for Kubernetes.

BApplication logs and monitoring data for auditing and troubleshooting purposes.

CSensitive user data such as usernames and passwords.

DPod data contained in Persistent Volume Claims (e.g. hostPath).

Answer : A

Question 2

Which of the following statements best describe container image signing and verification in the cloud environment?

AContainer image signatures and their verification ensure their authenticity and integrity against tampering.

BContainer image signatures are concerned with defining developer ownership of applications within multi-tenant environments.

CContainer image signatures are mandatory in cloud environments, as cloud providers would deny the execution of unsigned container images.

DContainer image signatures affect the performance of containerized applications, as they increase the size of images with additional metadata.

Answer : A

Question 3

Which of the following snippets from a RoleBinding correctly associates user bob with Role pod-reader ?

AOption A

BOption B

COption C

DOption D

Answer : B

Question 4

Which label should be added to the Namespace to block any privileged Pods from being created in that Namespace?

Aprivileged: false

Bprivileged: true

Cpod-security.kubernetes.io/enforce: baseline

Dpod.security.kubernetes.io/privileged: false

Answer : C

Question 5

A container image is trojanised by an attacker by compromising the build server. Based on the STRIDE threat modeling framework, which threat category best defines this threat?

ARepudiation

BSpoofing

CDenial of Service

DTampering

Answer : D

Question 6

What is the main reason an organization would use a Cloud Workload Protection Platform (CWPP) solution?

ATo protect containerized workloads from known vulnerabilities and malware threats.

BTo automate the deployment and management of containerized workloads.

CTo manage networking between containerized workloads in the Kubernetes cluster.

DTo optimize resource utilization and scalability of containerized workloads.

Answer : A

Question 7

What is the purpose of an egress NetworkPolicy?

ATo control the incoming network traffic to a Kubernetes cluster.

BTo control the outbound network traffic from a Kubernetes cluster.

CTo secure the Kubernetes cluster against unauthorized access.

DTo control the outgoing network traffic from one or more Kubernetes Pods.

Answer : D

Linux Foundation Kubernetes and Cloud Native Security Associate KCSA Exam Questions