Certified Kubernetes Security Specialist (CKS)
Domain 3Objective 2
Using Least-Privilege Identity and Access Management CKS Practice Questions (Page 1)
Part of the Cluster Hardening domain, which accounts for 15% of the CKS exam. Linux Foundation does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 2–3 from this objective — we provide 11 practice questions to prepare you well beyond it. (estimate)
11questions here
3free pages
7concepts
15%of the exam
Questions 1–5
- 1
Which Kubernetes RBAC object is used to grant permissions to resources within a single namespace only?
Select an answer first - 2
Which field in a Pod specification is used to assign a specific ServiceAccount to the pod?
Select an answer first - 3
How can you prevent a pod from automatically using the default ServiceAccount's token?
Select an answer first - 4
Which kubectl command is used to check whether a user or ServiceAccount can perform a specific action?
Select an answer first - 5
Which RBAC object is used to bind a ServiceAccount to a Role within a specific namespace?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Foundation. “CKS” is a trademark of its owner, used for identification only.