Which of the following is a common supply chain attack vector?

Compromised dependencies from open-source repositories

Using strong passwords for all accounts

What is a key security control for artifact repositories?

Allowing anonymous read access to speed up downloads

Implementing role-based access control (RBAC) to restrict who can push and pull artifacts

Disabling all logging to reduce storage costs

Storing artifacts in plaintext for easy access

A developer reports that a container image pulled from your internal registry behaves unexpectedly, and you suspect it may have been tampered with. Which step should you take first to investigate?

Run a vulnerability scan on the image.

Verify the image's digital signature and compare its digest with the one recorded at build time.

Review the Dockerfile used to build the image.

Check the image's creation date in the registry.

What is the primary purpose of a Software Bill of Materials (SBOM)?

To certify that the software has passed all security tests

To provide a formal record of all components and dependencies in a software artifact

To list all open-source licenses used in a project

To document the build environment and toolchain versions

Certified Kubernetes Security Specialist (CKS)

Domain 2Objective 2

Understand Your Supply Chain (e.g. SBOM, CI/CD, Artifact Repositories) CKS Practice Questions (Page 4)

Part of the Minimize Microservice Vulnerabilities domain, which accounts for 20% of the CKS exam. Linux Foundation does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 3–4 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

7concepts

20%of the exam

Questions 16–20

16foundation · easy
Which of the following are standard formats for representing an SBOM?
Select an answer first
17foundation · easy
Which of the following is a common supply chain attack vector?
Select an answer first
18foundation · easy
What is a key security control for artifact repositories?
Select an answer first
19application · medium
A developer reports that a container image pulled from your internal registry behaves unexpectedly, and you suspect it may have been tampered with. Which step should you take first to investigate?
Select an answer first
20foundation · easy
What is the primary purpose of a Software Bill of Materials (SBOM)?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CKS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Foundation. “CKS” is a trademark of its owner, used for identification only.