최신Linux Foundation Kubernetes and Cloud Native Security Associate - KCSA무료샘플문제

A. The Cloud enforces security controls at the Kubernetes cluster level, so application developers can focus on applications only.

B. A vulnerability in the Cloud layer has a negligible impact on containers due to Linux isolation mechanisms.

C. A Kubernetes cluster can only be as secure as the security posture of its Cloud hosting.

D. A Kubernetes cluster can only be trusted if the underlying Cloud provider is certified against international standards.

A. A build process that involves multiple stages of image creation, allowing for smaller, optimized images.

B. A build process that involves multiple repositories for storing container images.

C. A build process that involves multiple developers collaborating on building an image.

D. A build process that involves multiple containers running simultaneously to speed up the image creation.

A. The compromised Pod is automatically isolated from the network to prevent any connections to the API server.

B. The compromised Pod connects to the API server and is granted elevated privileges by default.

C. The compromised Pod attempts to connect to the API server, but its requests may be blocked due to network policies.

D. The compromised Pod is allowed to connect to the API server without any restrictions.

A. subjects:
- kind: Group
name: bob
apiGroup: rbac.authorization.k8s.io
roleRef:
kind: Role
name: pod-reader
apiGroup: rbac.authorization.k8s.io

B. subjects:
- kind: User
name: bob
apiGroup: rbac.authorization.k8s.io
roleRef:
kind: Role
name: pod-reader
apiGroup: rbac.authorization.k8s.io

C. subjects:
- kind: User
name: bob
apiGroup: rbac.authorization.k8s.io
roleRef:
kind: ClusterRole
name: pod-reader
apiGroup: rbac.authorization.k8s.io

D. subjects:
- kind: User
name: pod-reader
apiGroup: rbac.authorization.k8s.io
roleRef:
kind: Role
name: bob
apiGroup: rbac.authorization.k8s.io

A. Container image signatures affect the performance of containerized applications, as they increase the size of images with additional metadata.

B. Container image signatures and their verification ensure their authenticity and integrity against tampering.

C. Container image signatures are mandatory in cloud environments, as cloud providers would deny the execution of unsigned container images.

D. Container image signatures are concerned with defining developer ownership of applications within multi-tenant environments.

A. /etc/kubernetes/

B. $HOME/.config/kubernetes/

C. $HOME/.kube

D. /opt/kubernetes/secrets/

A. A container run with privileged: true within a Namespace can access all Secrets used within that Namespace.

B. A container run with privileged: true has no additional access to Secrets than if it were run with privileged: false.

C. A container run with privileged: true within a cluster can access all Secrets used within that cluster.

D. A container run with privileged: true on a node can access all Secrets used on that node.