最新的Linux Foundation Kubernetes and Cloud Native Security Associate - KCSA免費考試真題

A. From kubelet to Container Runtime

B. From kubelet to Controller Manager

C. From kubelet to API Server

D. From API Server to Container Runtime

A. The Pod cannot mount persistent volumes through CSI drivers.

B. The Pod's resource utilization increases significantly.

C. The Pods cannot communicate with other Pods in the cluster.

D. The Pod's security context restrictions cannot be enforced.

A. Base64 encoding relies on a shared key which can be easily compromised.

B. Base64 encoding is not supported by all Secret Stores.

C. Base64 encoding does not encrypt the contents of the Secret, only obfuscates it.

D. Base64 encoding is vulnerable to brute-force attacks.

A. OIDC, Bootstrap tokens, and Service Account Tokens

B. X509 Client Certs, Webhook Authentication, and Service Account Tokens

C. X509 Client Certs, OIDC, and Service Account Tokens

D. X509 Client Certs, Bootstrap Tokens, and Service Account Tokens

A. By setting the container runtime as an environment variable in the Pod.

B. By using a command-line flag when creating the Pod.

C. By specifying the container runtime in the Pod's YAML file.

D. By modifying the Docker daemon configuration.

A. A container breakout is the process of escaping the container and gaining access to the Pod's network traffic.

B. A container breakout is the process of escaping the container and gaining access to the cloud provider's infrastructure.

C. A container breakout is the process of escaping the container and gaining access to the host operating system.

D. A container breakout is the process of escaping a container when it reaches its resource limits.

A. Each namespace can have only one active policy.

B. Namespaces are ignored; Pod Security Admission policies apply cluster-wide only.

C. The default namespace enforces the strictest security policies by default.

D. Different policies can be applied to specific namespaces.