What is the effect of removing an unnecessary package from a host OS?

It frees up disk space but has no security impact

It prevents all unauthorized access to the host

It reduces the attack surface by eliminating potentially vulnerable software

It automatically updates all remaining packages to their latest versions

What does the term 'host OS footprint' refer to in the context of Kubernetes node security?

The total disk space consumed by the operating system and all installed applications

The set of software components, services, and packages installed and running on the host operating system

The memory and CPU resources consumed by the host operating system

The number of network interfaces and IP addresses configured on the host

A Kubernetes administrator needs to manage worker nodes remotely. Currently, SSH is open to the internet on all nodes. The security team wants to restrict host access. Which measure is the most effective to reduce the attack surface while maintaining necessary administrative access?

Allow SSH only from the corporate VPN IP range and enforce key-based authentication.

Keep SSH open to the internet but change the default port to 2222.

Disable SSH entirely and rely on the cloud provider's console access.

Use a shared password for all nodes to simplify access.

Certified Kubernetes Security Specialist (CKS)

Domain 5Objective 1

Minimize Host OS Footprint (reduce Attack Surface) CKS Practice Questions (Page 3)

Part of the System Hardening domain, which accounts for 10% of the CKS exam. Linux Foundation does not publish an official question count, but from its 120-minute exam (~50–80 total, ~5–8 in this domain), expect 1–2 from this objective — we provide 27 practice questions to prepare you well beyond it. (estimate)

27questions here

6free pages

7concepts

10%of the exam

Questions 11–15

11foundation · easy
What is the effect of removing an unnecessary package from a host OS?
Select an answer first
12foundation · easy
Which of the following is an example of a minimal base image commonly used for containers?
Select an answer first
13foundation · easy
What does the term 'host OS footprint' refer to in the context of Kubernetes node security?
Select an answer first
14application · medium
A Kubernetes administrator needs to manage worker nodes remotely. Currently, SSH is open to the internet on all nodes. The security team wants to restrict host access. Which measure is the most effective to reduce the attack surface while maintaining necessary administrative access?
Select an answer first
15foundation · easy
Which command permanently disables a service on a systemd-based Linux host?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CKS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Foundation. “CKS” is a trademark of its owner, used for identification only.

Minimize Host OS Footprint (reduce Attack Surface) CKS Practice Questions (Page 3)

Questions 11–15

What is the effect of removing an unnecessary package from a host OS?

Which of the following is an example of a minimal base image commonly used for containers?

What does the term 'host OS footprint' refer to in the context of Kubernetes node security?

A Kubernetes administrator needs to manage worker nodes remotely. Currently, SSH is open to the internet on all nodes. The security team wants to restrict host access. Which measure is the most effective to reduce the attack surface while maintaining necessary administrative access?

Which command permanently disables a service on a systemd-based Linux host?

Keep studying — System Hardening