Kubernetes and Cloud Native Security Associate (KCSA)
Domain 6Objective 4
Access to Sensitive Data KCSA Practice Questions (Page 2)
Part of the Kubernetes Threat Model domain, which accounts for 16% of the KCSA exam. Linux Foundation does not publish an official question count, but from its 90-minute exam (~35–60 total, ~6–10 in this domain), expect 1–2 from this objective — we provide 27 practice questions to prepare you well beyond it. (estimate)
27questions here
6free pages
6concepts
16%of the exam
Questions 6–10
- 6
Which principle is essential for mitigating the risk of sensitive data exposure through RBAC?
Select an answer first - 7
Which of the following is a potential threat actor who could access sensitive data in a Kubernetes cluster?
Select an answer first - 8
A developer accidentally commits a Kubernetes Secret manifest to a public GitHub repository. Which attack vector does this represent?
Select an answer first - 9
Which of the following is a common attack vector for accessing sensitive data in Kubernetes?
Select an answer first - 10
A security team is evaluating how to protect secrets in a multi-tenant Kubernetes cluster. They want to ensure that tenants cannot access each other's secrets. Which control is MOST effective?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Foundation. “KCSA” is a trademark of its owner, used for identification only.