Using Least-Privilege Identity and Access Management CKS Practice Questions (Page 5)

Questions 21–23

1. 21foundation · easy

   Why is the principle of least privilege important for Kubernetes security?

   • AIt simplifies cluster administration by giving all users the same permissions
   • BIt guarantees that no security breach can ever occur
   • CIt ensures that all pods run with root privileges for better performance
   • DIt limits the potential impact of a compromised account or container
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   Your security team suspects that a service account has been used to perform unauthorized actions. You need to determine what the account did and identify any excessive permissions it might have. What should you do first?

   • ARun 'kubectl auth can-i --list' as that service account.
   • BCheck the service account's token and its expiration time.
   • CReview the Kubernetes audit logs for requests made by that service account.
   • DInspect the service account's YAML definition.
   Reveal Solution Discussion Select an answer first
3. 23foundation · easy

   What is the primary purpose of enabling audit logging in Kubernetes?

   • ATo improve cluster performance by caching API responses
   • BTo record a chronological sequence of API requests for security analysis and monitoring
   • CTo automatically block malicious requests
   • DTo replace RBAC as the primary access control mechanism
   Reveal Solution Discussion Select an answer first