What is the purpose of creating a dedicated service account for a workload instead of using the default service account?

It automatically grants the workload cluster-admin permissions.

It allows you to grant the workload only the specific permissions it needs, following least privilege.

It makes the workload run faster because it uses a separate token.

It is required by Kubernetes for all workloads to run.

What is the primary purpose of restricting access to the Kubernetes API server?

To improve API server performance by reducing the number of requests.

To allow only cloud providers to access the API server.

To comply with Kubernetes licensing requirements.

To reduce the attack surface and prevent unauthorized access to the cluster control plane.

What is the purpose of the Webhook authorization mode?

To encrypt authorization decisions.

To allow anonymous users to access the API server.

To delegate authorization decisions to an external service.

Certified Kubernetes Security Specialist (CKS)

Domain 1Objective 3

Access Control CKS Practice Questions (Page 2)

Part of the Cluster Setup domain, which accounts for 15% of the CKS exam. Linux Foundation does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 2–3 from this objective — we provide 21 practice questions to prepare you well beyond it. (estimate)

21questions here

5free pages

10concepts

15%of the exam

Questions 6–10

6foundation · easy
Which authorization mode is the most commonly used and recommended for Kubernetes clusters?
Select an answer first
7foundation · easy
What is the purpose of creating a dedicated service account for a workload instead of using the default service account?
Select an answer first
8foundation · easy
What is the primary purpose of restricting access to the Kubernetes API server?
Select an answer first
9foundation · easy
What is the purpose of the Webhook authorization mode?
Select an answer first
10foundation · easy
Which of the following is a supported authentication method for the Kubernetes API server?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CKS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Foundation. “CKS” is a trademark of its owner, used for identification only.

Access Control CKS Practice Questions (Page 2)

Questions 6–10

Which authorization mode is the most commonly used and recommended for Kubernetes clusters?

What is the purpose of creating a dedicated service account for a workload instead of using the default service account?

What is the primary purpose of restricting access to the Kubernetes API server?

What is the purpose of the Webhook authorization mode?

Which of the following is a supported authentication method for the Kubernetes API server?

Keep studying — Cluster Setup