Kubernetes Security CKAD Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   What is the default authentication method for pods to access the Kubernetes API?

   • AWebhook tokens
   • BService account tokens
   • CClient certificates mounted from a secret
   • DBasic authentication with username/password
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   How do multiple NetworkPolicies combine for a given pod?

   • AThe most restrictive policy wins
   • BThe policies are ORed together, so traffic allowed by any policy is permitted
   • CThe least restrictive policy wins
   • DThe policies are ANDed together, so traffic must be allowed by all policies
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   In a NetworkPolicy, what field is used to select the pods to which the policy applies?

   • Aspec.podSelector
   • Bspec.namespaceSelector
   • Cspec.ingress
   • Dspec.ipBlock
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which of the following is a valid authentication mechanism in Kubernetes?

   • AClient certificates
   • BAPI keys stored in ConfigMaps
   • CSSH keys for API access
   • DUsername and password in the pod spec
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What does setting 'privileged: true' in a container's SecurityContext do?

   • AIt restricts the container's network access
   • BIt makes the container read-only
   • CIt gives the container all capabilities and access to the host
   • DIt allows the container to run as root
   Reveal Solution Discussion Select an answer first