Security KCNA Practice Questions (Page 5)

Questions 21–23

1. 21foundation · easy

   Which RBAC resource grants permissions within a single namespace?

   • ARole
   • BRoleBinding
   • CClusterRole
   • DClusterRoleBinding
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   An application running in a pod needs to authenticate to an external database using credentials that are stored in a Kubernetes Secret. The team wants to ensure the credentials are not exposed in the pod's environment variables. What should they do?

   • AMount the Secret as a volume and have the application read the credentials from the mounted file.
   • BReference the Secret in the pod's environment variables using the `valueFrom` field.
   • CEmbed the credentials directly in the container image.
   • DStore the credentials in a ConfigMap and mount it as a volume.
   Reveal Solution Discussion Select an answer first
3. 23application · medium

   An application reads a database password from a Secret mounted as a volume. The team wants to ensure that the password is not visible in the pod's environment variables. What should they verify?

   • AThe Secret is of type `Opaque`.
   • BThe Secret is mounted as a volume and not referenced in the pod's `env` section.
   • CThe Secret is created in the same namespace as the pod.
   • DThe pod's security context has `readOnlyRootFilesystem: true`.
   Reveal Solution Discussion Select an answer first