What is the primary security benefit of using minimal base images for containers?

They automatically include the latest security patches

They are always faster to pull from a registry

They reduce the attack surface by containing fewer packages and tools

They eliminate the need for container runtime security

A security consultant explains that minimizing the host OS footprint reduces the attack surface. Which statement best describes why this is true?

Fewer installed packages and running services mean fewer potential vulnerabilities that can be exploited.

Minimizing the footprint ensures the host is compliant with all security standards.

A smaller OS footprint makes the host run faster and use less memory.

A smaller footprint makes it easier to back up the host OS.

Why is it important to regularly apply security updates and patches to the host OS of a Kubernetes node?

To ensure compatibility with the latest Kubernetes version

To enable new features in the container runtime

To mitigate known vulnerabilities that could be exploited by attackers

To improve the performance of the Kubernetes control plane

A security team wants to harden a Kubernetes node by restricting core dump files, which may contain sensitive information. Which sysctl parameter should they set?

`kernel.core_pattern=/dev/null`

A Kubernetes administrator is setting up access to worker nodes. The team wants to ensure that only authorized administrators can access the nodes and that access is auditable. Which approach best meets these requirements?

Disable SSH and use the Kubernetes API to execute commands on nodes.

Allow SSH from any IP address but require a strong password.

Use a shared SSH key for all administrators to simplify access.

Use SSH with key-based authentication and restrict access to a jump host.

Certified Kubernetes Security Specialist (CKS)

Domain 5Objective 1

Minimize Host OS Footprint (reduce Attack Surface) CKS Practice Questions (Page 1)

Part of the System Hardening domain, which accounts for 10% of the CKS exam. Linux Foundation does not publish an official question count, but from its 120-minute exam (~50–80 total, ~5–8 in this domain), expect 1–2 from this objective — we provide 27 practice questions to prepare you well beyond it. (estimate)

27questions here

6free pages

7concepts

10%of the exam

Questions 1–5

1foundation · easy
What is the primary security benefit of using minimal base images for containers?
Select an answer first
2application · medium
A security consultant explains that minimizing the host OS footprint reduces the attack surface. Which statement best describes why this is true?
Select an answer first
3foundation · easy
Why is it important to regularly apply security updates and patches to the host OS of a Kubernetes node?
Select an answer first
4application · medium
A security team wants to harden a Kubernetes node by restricting core dump files, which may contain sensitive information. Which sysctl parameter should they set?
Select an answer first
5application · medium
A Kubernetes administrator is setting up access to worker nodes. The team wants to ensure that only authorized administrators can access the nodes and that access is auditable. Which approach best meets these requirements?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CKS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Foundation. “CKS” is a trademark of its owner, used for identification only.