Linux Foundation Kubernetes and Cloud Native Security Associate - KCSA FREE EXAM DUMPS QUESTIONS & ANSWERS

A. The default namespace enforces the strictest security policies by default. B. Different policies can be applied to specific namespaces. C. Namespaces are ignored; Pod Security Admission policies apply cluster-wide only. D. Each namespace can have only one active policy.

A. To manage certificates and ensure secure communication in a Kubernetes cluster. B. To monitor and analyze performance metrics of a Kubernetes cluster. C. To manage networking in a Kubernetes cluster. D. To automate the scaling of containers in a Kubernetes cluster.

A. NetworkPolicy resources are only enforced for unprivileged Pods. B. NetworkPolicy resources are only enforced if the networking plugin supports them. C. NetworkPolicy resources are only enforced if the Kubernetes scheduler supports them. D. NetworkPolicy resources are only enforced if the user has the right RBAC permissions.

A. Kubelet runs as a privileged container by default. B. Kubelet supports TLS authentication and encryption for secure communication with the API server. C. Kubelet requires root access to interact with the host system. D. Kubelet does not have any built-in security features.

A. Kubernetes Controller Manager B. Kubernetes API Server C. Kubernetes Scheduler D. kubelet

A. Using ConfigMaps for storing secrets might make applications incompatible with the Kubernetes cluster. B. ConfigMaps store sensitive information in etcd encoded in base64 format automatically, which does not ensure confidentiality of data. C. Storing secrets in ConfigMaps does not allow for fine-grained access control via RBAC. D. Storing secrets in ConfigMaps can expose sensitive information as they are stored in plaintext and can be accessed by unauthorized users.

A. A container breakout is the process of escaping the container and gaining access to the host operating system. B. A container breakout is the process of escaping a container when it reaches its resource limits. C. A container breakout is the process of escaping the container and gaining access to the cloud provider's infrastructure. D. A container breakout is the process of escaping the container and gaining access to the Pod's network traffic.