Kubernetes and Cloud Native Security Associate (KCSA)
Domain 6Objective 4
Access to Sensitive Data KCSA Practice Questions (Page 4)
Part of the Kubernetes Threat Model domain, which accounts for 16% of the KCSA exam. Linux Foundation does not publish an official question count, but from its 90-minute exam (~35–60 total, ~6–10 in this domain), expect 1–2 from this objective — we provide 27 practice questions to prepare you well beyond it. (estimate)
27questions here
6free pages
6concepts
16%of the exam
Questions 16–20
- 16
A security audit reveals that a Kubernetes cluster has a RoleBinding that grants 'get' and 'list' permissions on all Secrets to a service account used by a CI/CD pipeline. This is an example of which attack vector?
Select an answer first - 17
Which of the following is a potential impact of exposing Kubernetes Secrets?
Select an answer first - 18
A company wants to protect secrets stored in Kubernetes from being read by unauthorized users. They are considering using Kubernetes Secrets with encryption at rest. Which additional control is MOST effective in limiting access to secrets?
Select an answer first - 19
A Kubernetes cluster stores a database password as a Secret. An attacker with read access to Secrets retrieves it and uses it to access the database, exfiltrating customer data. Which of the following is the MOST significant impact of this exposure?
Select an answer first - 20
Which of the following is a type of sensitive data commonly stored in Kubernetes clusters?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Foundation. “KCSA” is a trademark of its owner, used for identification only.