Certified Kubernetes Security Specialist (CKS)
Domain 4Objective 4
Ensure Immutability of Containers at Runtime CKS Practice Questions (Page 5)
Part of the Supply Chain Security domain, which accounts for 20% of the CKS exam. Linux Foundation does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 2–3 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)
24questions here
5free pages
5concepts
20%of the exam
Questions 21–24
- 21
A container with a read-only root filesystem needs to write logs to /var/log/app. The logs should be discarded when the Pod is deleted. Which volume type should be mounted at /var/log/app?
Select an answer first - 22
Which runtime inspection tool is specifically designed to detect unexpected system calls or file modifications in containers?
Select an answer first - 23
Which volume type is specifically designed to provide ephemeral storage for containers and is deleted when the Pod is removed?
Select an answer first - 24
A container with a read-only root filesystem needs to share a writable directory between two containers in the same Pod. What should be configured?
Select an answer first
Finished these 4 questions?
Review the revealed explanations, or continue through the curriculum.
No more pagesBack to CKS
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Foundation. “CKS” is a trademark of its owner, used for identification only.