Linux Foundation Kubernetes and Cloud Native Security Associate - KCSA Exam Practice Test

A. A container run with privileged: true within a cluster can access all Secrets used within that cluster.

B. A container run with privileged: true has no additional access to Secrets than if it were run with privileged: false.

C. A container run with privileged: true on a node can access all Secrets used on that node.

D. A container run with privileged: true within a Namespace can access all Secrets used within that Namespace.

A. MicroVMs allow for easier container management and orchestration than user-space kernel implementation.

B. MicroVMs provide reduced application compatibility and higher per-system call overhead than user- space kernel implementations.

C. MicroVMs offer higher isolation than user-space kernel implementations at the cost of a higher per- instance memory footprint.

D. MicroVMs offer lower isolation and security compared to user-space kernel implementations.

A. The Scheduler is responsible for ensuring the security of the Kubernetes cluster and its components.

B. The Scheduler is responsible for assigning Pods to nodes based on resource availability and other constraints.

C. The Scheduler is responsible for monitoring and managing the health of the Kubernetes cluster.

D. The Scheduler is responsible for managing the deployment and scaling of applications in the Kubernetes cluster.

A. Unauthorized access to external resources

B. Denial of Service

C. Data exfiltration

D. Increased attack surface

A. To optimize resource utilization and scalability of containerized workloads.

B. To automate the deployment and management of containerized workloads.

C. To protect containerized workloads from known vulnerabilities and malware threats.

D. To manage networking between containerized workloads in the Kubernetes cluster.

A. Kubernetes API Server

B. Kubernetes Scheduler

C. Kubernetes Controller Manager

D. kubelet

A. Replication controller, Endpoints controller, Namespace controller, and ServiceAccounts controller

B. Job controller, CronJob controller, and DaemonSet controller

C. Pod, Service, and Ingress controller

D. Namespace controller, ConfigMap controller, and Secret controller