KCSA試験無料問題集（62題）「Linux Foundation Kubernetes and Cloud Native Security Associate 認定」

出題：1

In the event that kube-proxy is in a CrashLoopBackOff state, what impact does it have on the Pods running on the same worker node?

A. The Pod's resource utilization increases significantly.

B. The Pod cannot mount persistent volumes through CSI drivers.

C. The Pods cannot communicate with other Pods in the cluster.

D. The Pod's security context restrictions cannot be enforced.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

As a Kubernetes and Cloud Native Security Associate, a user can set upaudit loggingin a cluster. What is the risk of logging every event at the fullRequestResponselevel?

A. No risk, as it provides the most comprehensive audit trail.

B. Increased storage requirements and potential impact on performance.

C. Reduced storage requirements and faster performance.

D. Improved security and easier incident investigation.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

In a cluster that contains Nodes withmultiple container runtimesinstalled, how can a Pod be configured to be created on a specific runtime?

A. By modifying the Docker daemon configuration.

B. By setting the container runtime as an environment variable in the Pod.

C. By specifying the container runtime in the Pod's YAML file.

D. By using a command-line flag when creating the Pod.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

When should soft multitenancy be used over hard multitenancy?

A. When the priority is enabling strict security boundaries between tenants.

B. When the priority is enabling fine-grained control over tenant resources.

C. When the priority is enabling complete isolation between tenants.

D. When the priority is enabling resource sharing and efficiency between tenants.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

Which of the following statements best describe container image signing and verification in the cloud environment?

A. Container image signatures are concerned with defining developer ownership of applications within multi-tenant environments.

B. Container image signatures and their verification ensure their authenticity and integrity against tampering.

C. Container image signatures are mandatory in cloud environments, as cloud providers would deny the execution of unsigned container images.

D. Container image signatures affect the performance of containerized applications, as they increase the size of images with additional metadata.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

Which label should be added to the Namespace to block any privileged Pods from being created in that Namespace?

A. privileged: true

B. pod.security.kubernetes.io/privileged: false

C. privileged: false

D. pod-security.kubernetes.io/enforce: baseline

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

A Kubernetes cluster tenant can launch privileged Pods in contravention of therestricted Pod Security Standardmandated for cluster tenants and enforced by the built-inPodSecurity admission controller.
The tenant has full CRUD permissions on the namespace object and the namespaced resources. How did the tenant achieve this?

A. The scope of the tenant role means privilege escalation is impossible.

B. By tampering with the namespace labels.

C. By using higher-level access credentials obtained reading secrets from another namespace.

D. By deleting the PodSecurity admission controller deployment running in their namespace.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

KCSA試験無料問題集「Linux Foundation Kubernetes and Cloud Native Security Associate 認定」