Describe the Security Implications of Running Vault in Kubernetes VAULT-OPERATIONS-PROFESSIONAL Practice Questions (Page 4)

Questions 16–18

1. 16application · medium

   Your Vault cluster is experiencing performance degradation due to a noisy neighbor workload consuming excessive CPU on the same node. You need to ensure Vault has predictable performance and is protected from resource starvation. Which configuration should you apply?

   • ASet only resource limits for the Vault container, and rely on the node's default scheduler to place Vault on a dedicated node.
   • BSet resource requests for the Vault container, and configure a LimitRange to cap the namespace's total CPU usage.
   • CSet resource requests and limits for the Vault container, and configure a ResourceQuota in the Vault namespace.
   • DSet resource limits for the Vault container, and use a NetworkPolicy to block traffic from the noisy neighbor.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the security implication of granting a Vault service account broad permissions, such as `cluster-admin`, in Kubernetes?

   • AIt increases the risk that a compromised Vault pod could be used to escalate privileges or access sensitive cluster resources.
   • BIt prevents Vault from being compromised.
   • CIt is required for Vault to function correctly and has no security impact.
   • DIt allows Vault to encrypt all data in the cluster.
   Reveal Solution Discussion Select an answer first
3. 18foundation · easy

   What is the role of Kubernetes ResourceQuotas in securing a Vault deployment?

   • AThey encrypt all data stored in the namespace.
   • BThey limit the total resources that a namespace can consume, preventing a compromised or misconfigured Vault from exhausting cluster resources.
   • CThey automatically scale Vault pods based on load.
   • DThey restrict network access to Vault pods.
   Reveal Solution Discussion Select an answer first