Online Access Free KCSA Practice Test

Which of the following statements best describe container image signing and verification in the cloud environment?

• A.Container image signatures and their verification ensure their authenticity and integrity against tampering.
• B.Container image signatures are mandatory in cloud environments, as cloud providers would deny the execution of unsigned container images.
• C.Container image signatures affect the performance of containerized applications, as they increase the size of images with additional metadata.
• D.Container image signatures are concerned with defining developer ownership of applications within multi-tenant environments.

Which of the following snippets from a RoleBinding correctly associates user bob with Role pod-reader ?

• A.subjects:
  - kind: User
  name: bob
  apiGroup: rbac.authorization.k8s.io
  roleRef:
  kind: Role
  name: pod-reader
  apiGroup: rbac.authorization.k8s.io
• B.subjects:
  - kind: User
  name: pod-reader
  apiGroup: rbac.authorization.k8s.io
  roleRef:
  kind: Role
  name: bob
  apiGroup: rbac.authorization.k8s.io
• C.subjects:
  - kind: Group
  name: bob
  apiGroup: rbac.authorization.k8s.io
  roleRef:
  kind: Role
  name: pod-reader
  apiGroup: rbac.authorization.k8s.io
• D.subjects:
  - kind: User
  name: bob
  apiGroup: rbac.authorization.k8s.io
  roleRef:
  kind: ClusterRole
  name: pod-reader
  apiGroup: rbac.authorization.k8s.io

Which standard approach to security is augmented by the 4C's of Cloud Native security?

• A.Secure-by-Design
• B.Defense-in-Depth
• C.Least Privilege
• D.Zero Trust

Which of the following is a valid security risk caused by having no egress controls in a Kubernetes cluster?

• A.Increased attack surface
• B.Data exfiltration
• C.Unauthorized access to external resources
• D.Denial of Service

What does thecluster-adminClusterRole enable when used in a RoleBinding?

• A.It gives full control over every resource in the role binding's namespace, not including the namespace object for isolation purposes.
• B.It allows read/write access to most resources in the role binding's namespace. This role does not allow write access to resource quota, to the namespace itself, and to EndpointSlices (or Endpoints).
• C.It gives full control over every resource in the cluster and in all namespaces.
• D.It gives full control over every resource in the role binding's namespace, including the namespace itself.