Which of the following is a recommended practice to mitigate supply chain risks?

Using the latest tag for all images.

Using images from public registries without checks.

Using only images from trusted registries.

How can a pod consume a Secret as environment variables?

Using the volumes field with a ConfigMap.

Using the serviceAccountName field.

Using the imagePullSecrets field.

Using the envFrom field in the pod spec.

What is the default behavior for pod-to-pod traffic when no NetworkPolicy is applied?

Only traffic within the same namespace is allowed.

Only traffic to services is allowed.

Kubernetes and Cloud Native Associate (KCNA)

Domain 1Objective 4

Security KCNA Practice Questions (Page 1)

Part of the Kubernetes Fundamentals domain, which accounts for 44% of the KCNA exam. Linux Foundation does not publish an official question count, but from its 90-minute exam (~35–60 total, ~15–26 in this domain), expect 3–4 from this objective — we provide 23 practice questions to prepare you well beyond it. (estimate)

23questions here

5free pages

8concepts

44%of the exam

Questions 1–5

1foundation · easy
What is the default service account that pods use to authenticate with the Kubernetes API server if none is specified?
Select an answer first
2foundation · easy
Which of the following is a recommended practice to mitigate supply chain risks?
Select an answer first
3foundation · easy
How can a pod consume a Secret as environment variables?
Select an answer first
4foundation · easy
What is the default behavior for pod-to-pod traffic when no NetworkPolicy is applied?
Select an answer first
5foundation · easy
Which practice helps ensure the integrity of a container image by verifying it was not tampered with?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to KCNA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Foundation. “KCNA” is a trademark of its owner, used for identification only.

Security KCNA Practice Questions (Page 1)

Questions 1–5

What is the default service account that pods use to authenticate with the Kubernetes API server if none is specified?

Which of the following is a recommended practice to mitigate supply chain risks?

How can a pod consume a Secret as environment variables?

What is the default behavior for pod-to-pod traffic when no NetworkPolicy is applied?

Which practice helps ensure the integrity of a container image by verifying it was not tampered with?

Keep studying — Kubernetes Fundamentals