Linux Foundation KCSA Exam Questions Instant Access

Question 1

What is the main reason an organization would use a Cloud Workload Protection Platform (CWPP) solution?

ATo protect containerized workloads from known vulnerabilities and malware threats.

BTo automate the deployment and management of containerized workloads.

CTo manage networking between containerized workloads in the Kubernetes cluster.

DTo optimize resource utilization and scalability of containerized workloads.

Answer : A

Question 2

Which of the following statements best describes the role of the Scheduler in Kubernetes?

AThe Scheduler is responsible for monitoring and managing the health of the Kubernetes cluster.

BThe Scheduler is responsible for ensuring the security of the Kubernetes cluster and its components.

CThe Scheduler is responsible for managing the deployment and scaling of applications in the Kubernetes cluster.

DThe Scheduler is responsible for assigning Pods to nodes based on resource availability and other constraints.

Answer : D

Question 3

When should soft multitenancy be used over hard multitenancy?

AWhen the priority is enabling resource sharing and efficiency between tenants.

BWhen the priority is enabling complete isolation between tenants.

CWhen the priority is enabling fine-grained control over tenant resources.

DWhen the priority is enabling strict security boundaries between tenants.

Answer : A

Question 4

In a Kubernetes environment, what kind of Admission Controller can modify resource manifests when applied to the Kubernetes API to fix misconfigurations automatically?

AValidatingAdmissionController

BPodSecurityPolicy

CMutatingAdmissionController

DResourceQuota

Answer : C

Question 5

A cluster is failing to pull more recent versions of images from k8s.gcr.io. Why may this be?

AThere is a network connectivity issue between the cluster and k8s.gcr.io.

BThere is a bug in the container runtime or the image pull process.

CThe authentication credentials for accessing k8s.gcr.io are incorrectly scoped.

DThe container image registry k8s.gcr.io has been deprecated.

Answer : D

Question 6

In which order are the validating and mutating admission controllers run while the Kubernetes API server processes a request?

AThe order of execution varies and is determined by the cluster configuration.

BValidating admission controllers run before mutating admission controllers.

CValidating and mutating admission controllers run simultaneously.

DMutating admission controllers run before validating admission controllers.

Answer : D

Question 7

Why might NetworkPolicy resources have no effect in a Kubernetes cluster?

ANetworkPolicy resources are only enforced if the Kubernetes scheduler supports them.

BNetworkPolicy resources are only enforced if the networking plugin supports them.

CNetworkPolicy resources are only enforced for unprivileged Pods.

DNetworkPolicy resources are only enforced if the user has the right RBAC permissions.

Answer : B

Linux Foundation Kubernetes and Cloud Native Security Associate KCSA Exam Questions