Free Linux Foundation KCSA Exam Dumps Questions & Answers

To restrict the kubelet's rights to the Kubernetes API, whatauthorization modeshould be set on the Kubernetes API server?

• A.AlwaysAllow
• B.Webhook
• C.Node
• D.kubelet

Which of the following is a valid security risk caused by having no egress controls in a Kubernetes cluster?

• A.Data exfiltration
• B.Denial of Service
• C.Increased attack surface
• D.Unauthorized access to external resources

Which step would give an attacker a foothold in a cluster butno long-term persistence?

• A.Starting a process in a running container.
• B.Create restarting container on host using Docker.
• C.Modify Kubernetes objects stored within etcd.
• D.Modify file on host filesystem.

What is the purpose of an egress NetworkPolicy?

• A.To control the outgoing network traffic from one or more Kubernetes Pods.
• B.To control the outbound network traffic from a Kubernetes cluster.
• C.To control the incoming network traffic to a Kubernetes cluster.
• D.To secure the Kubernetes cluster against unauthorized access.

In Kubernetes, what isPublic Key Infrastructure (PKI)used for?

• A.To automate the scaling of containers in a Kubernetes cluster.
• B.To manage certificates and ensure secure communication in a Kubernetes cluster.
• C.To manage networking in a Kubernetes cluster.
• D.To monitor and analyze performance metrics of a Kubernetes cluster.