A company runs a multi-tenant Kubernetes cluster. They need to ensure that tenants cannot access each other's services, but they also need to allow a specific monitoring service to access metrics from all tenants. Which set of controls should they implement?

Use a service mesh with mutual TLS and strict mTLS policies.

Use a single namespace for all tenants and rely on ServiceAccounts for isolation.

NetworkPolicies that deny ingress from other namespaces, and a separate NetworkPolicy that allows ingress from the monitoring namespace.

Use a LoadBalancer Service for each tenant and restrict access via security groups.

GIAC Cloud Security Automation

Domain 3Objective 1

Architecture and Fundamentals of Container Orchestration GCSA Practice Questions (Page 8)

Part of the Container Orchestration Architecture and Security domain, which makes up ~19% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–15 in this domain), expect 3–4 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

6concepts

Questions 36–36

36expert · hard
A company runs a multi-tenant Kubernetes cluster. They need to ensure that tenants cannot access each other's services, but they also need to allow a specific monitoring service to access metrics from all tenants. Which set of controls should they implement?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GCSA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCSA” is a trademark of its owner, used for identification only.

Architecture and Fundamentals of Container Orchestration GCSA Practice Questions (Page 8)

Questions 36–36

A company runs a multi-tenant Kubernetes cluster. They need to ensure that tenants cannot access each other's services, but they also need to allow a specific monitoring service to access metrics from all tenants. Which set of controls should they implement?

Keep studying — Container Orchestration Architecture and Security