Online Access Free KCSA Practice Test

Which of the following statements regarding a container run with privileged: true is correct?

• A.A container run with privileged: true on a node can access all Secrets used on that node.
• B.A container run with privileged: true has no additional access to Secrets than if it were run with privileged: false.
• C.A container run with privileged: true within a cluster can access all Secrets used within that cluster.
• D.A container run with privileged: true within a Namespace can access all Secrets used within that Namespace.

A user runs a command with kubectl to apply a change to a deployment. What is the first Kubernetes component that the request reaches?

• A.Kubernetes Scheduler
• B.Kubernetes API Server
• C.kubelet
• D.Kubernetes Controller Manager

In a Kubernetes environment, what kind of Admission Controller can modify resource manifests when applied to the Kubernetes API to fix misconfigurations automatically?

• A.ValidatingAdmissionController
• B.ResourceQuota
• C.PodSecurityPolicy
• D.MutatingAdmissionController

A cluster administrator wants to enforce the use of a different container runtime depending on the application a workload belongs to.

• A.By configuring avalidating admission controllerwebhook that verifies the container runtime based on the application label and rejects requests that do not comply.
• B.By configuring amutating admission controllerwebhook that intercepts new workload creation requests and modifies the container runtime based on the application label.
• C.By manually modifying the container runtime for each workload after it has been created.
• D.By modifying the kube-apiserver configuration file to specify the desired container runtime for each application.

Why does the defaultbase64 encodingthat Kubernetes applies to the contents of Secret resources provide inadequate protection?

• A.Base64 encoding is vulnerable to brute-force attacks.
• B.Base64 encoding relies on a shared key which can be easily compromised.
• C.Base64 encoding does not encrypt the contents of the Secret, only obfuscates it.
• D.Base64 encoding is not supported by all Secret Stores.