Which etcd security measure is critical to prevent unauthorized access to cluster data?

Storing etcd data in plaintext for performance

Exposing etcd on a public port for monitoring

Disabling etcd authentication to simplify operations

Enabling TLS client authentication for etcd

What is the purpose of enabling Cilium's transparent encryption for pod-to-pod traffic?

To authenticate users accessing the cluster

To load balance traffic between pods

To compress pod-to-pod traffic to reduce bandwidth

To encrypt all traffic between pods without requiring application changes

What is the purpose of the annotation 'nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"'?

To enable client certificate authentication

To set the TLS version for external connections

To encrypt traffic between the ingress controller and the backend service

Certified Kubernetes Security Specialist (CKS)

Domain 1Objective 2

Network Security CKS Practice Questions (Page 3)

Part of the Cluster Setup domain, which accounts for 15% of the CKS exam. Linux Foundation does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 2–3 from this objective — we provide 20 practice questions to prepare you well beyond it. (estimate)

20questions here

4free pages

11concepts

15%of the exam

Questions 11–15

11foundation · easy
Which field in an Ingress spec specifies the TLS certificate and key?
Select an answer first
12foundation · easy
Which etcd security measure is critical to prevent unauthorized access to cluster data?
Select an answer first
13foundation · easy
What is the purpose of enabling Cilium's transparent encryption for pod-to-pod traffic?
Select an answer first
14foundation · easy
What is the purpose of the annotation 'nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"'?
Select an answer first
15foundation · easy
Which encryption backends can Cilium use for pod-to-pod encryption?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CKS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Foundation. “CKS” is a trademark of its owner, used for identification only.

Network Security CKS Practice Questions (Page 3)

Questions 11–15

Which field in an Ingress spec specifies the TLS certificate and key?

Which etcd security measure is critical to prevent unauthorized access to cluster data?

What is the purpose of enabling Cilium's transparent encryption for pod-to-pod traffic?

What is the purpose of the annotation 'nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"'?

Which encryption backends can Cilium use for pod-to-pod encryption?

Keep studying — Cluster Setup