Kubernetes Security CKAD Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A developer wants to authenticate to the Kubernetes API server from their laptop using a client certificate. They have generated a private key and a certificate signing request (CSR). What is the next step to get a valid client certificate?

   • ASubmit the CSR to the Kubernetes API server using the CertificateSigningRequest (CSR) resource, and have an administrator approve it.
   • BAdd the developer's public key to the kubeconfig file.
   • CSign the CSR with the cluster's CA certificate directly using openssl.
   • DUse the developer's ServiceAccount token to authenticate instead.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the purpose of the 'capabilities' field in a SecurityContext?

   • ATo set the CPU and memory limits
   • BTo define the container's network access
   • CTo add or drop Linux capabilities for the container
   • DTo specify which users can access the container
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which authorization mode is specifically designed for kubelet API access?

   • AABAC
   • BNode
   • CRBAC
   • DWebhook
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which of the following can be used in a NetworkPolicy rule to select allowed sources? (Select the one that is NOT valid.)

   • ApodSelector
   • BnamespaceSelector
   • CipBlock
   • DserviceSelector
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   In a SecurityContext, what does the 'runAsNonRoot' field do?

   • AIt prevents the container from running as root
   • BIt forces the container to run as the root user
   • CIt sets the user to a specific non-root user
   • DIt allows the container to run as any user
   Reveal Solution Discussion Select an answer first