Certified Kubernetes Security Specialist (CKS)
Domain 1Objective 4
Workload and Data Security CKS Practice Questions (Page 2)
Part of the Cluster Setup domain, which accounts for 15% of the CKS exam. Linux Foundation does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 2–3 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)
28questions here
6free pages
11concepts
15%of the exam
Questions 6–10
- 6
You need to run a workload that processes untrusted user-supplied code. The workload requires access to a GPU for computation. You are considering using a sandboxed runtime like gVisor or Kata Containers for isolation. Which consideration is most important when choosing between gVisor and Kata Containers for this workload?
Select an answer first - 7
Which security context field specifies the user ID that the container's processes will run as?
Select an answer first - 8
Which Kubernetes feature provides a way to divide cluster resources among multiple users or teams?
Select an answer first - 9
Which Pod Security Admission mode records policy violations in the audit log but does not block pod creation?
Select an answer first - 10
Which of the following is a valid way to consume a Secret in a pod?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Foundation. “CKS” is a trademark of its owner, used for identification only.