100% Free Linux Foundation KCSA Practice Test Questions

Question 1

What does the 'cluster-admin' ClusterRole enable when used in a RoleBinding?

A : It gives full control over every resource in the role binding's namespace, not including the namespace object for isolation purposes.

B : It gives full control over every resource in the cluster and in all namespaces.

C : It gives full control over every resource in the role binding's namespace, including the namespace itself.

D : It allows read/write access to most resources in the role binding's namespace. This role does not allow write access to resource quota, to the namespace itself, and to EndpointSlices (or Endpoints).

Answer: B

Question 2

When assessing the security of a cloud-native infrastructure, which of the following would not typically be the direct responsibility of the cloud service provider?

A : Physical security of data center facilities

B : Patching the host operating system of virtual machines

C : Encrypting data at rest within the customer's application

D : Ensuring the availability of network infrastructure

Answer: C

Question 3

What does the 'cluster-admin' ClusterRole enable when used in a RoleBinding?

A : It gives full control over every resource in the role binding's namespace, not including the namespace object for isolation purposes.

B : It gives full control over every resource in the cluster and in all namespaces.

C : It gives full control over every resource in the role binding's namespace, including the namespace itself.

D : It allows read/write access to most resources in the role binding's namespace. This role does not allow write access to resource quota, to the namespace itself, and to EndpointSlices (or Endpoints).

Answer: B

Question 4

Which step would give an attacker a foothold in a cluster but no long-term persistence?

A : Modify Kubernetes objects stored within etcd.

B : Modify file on host filesystem.

C : Starting a process in a running container.

D : Create restarting container on host using Docker.

Answer: C

Question 5

Which step would give an attacker a foothold in a cluster but no long-term persistence?

A : Modify Kubernetes objects stored within etcd.

B : Modify file on host filesystem.

C : Starting a process in a running container.

D : Create restarting container on host using Docker.

Answer: C

100% Free KCSA Practice Exam Questions and Answers