Admission Control KCSA Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Why is it important to configure TLS for admission webhook servers?

   • ATo allow the webhook server to be accessed from outside the cluster
   • BTo authenticate the API server to the webhook server
   • CTo improve the performance of the webhook server
   • DTo encrypt the admission requests and responses between the API server and the webhook server
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   How can admission control be used to enforce Pod Security Standards in a cluster?

   • ABy using the LimitRanger controller to set security defaults
   • BBy using the ResourceQuota controller to limit pod security
   • CBy using the ServiceAccount controller to restrict pod privileges
   • DBy using the PodSecurity admission controller to apply security policies based on labels
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which admission controller is responsible for sending admission requests to external webhook servers for validation?

   • AValidatingAdmissionWebhook
   • BNamespaceLifecycle
   • CResourceQuota
   • DMutatingAdmissionWebhook
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   In the admission control process, which type of admission controller is invoked first?

   • AValidating admission controllers
   • BBoth are invoked simultaneously
   • CThe order depends on the resource type
   • DMutating admission controllers
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which built-in admission controller is responsible for rejecting requests to create or delete objects in a namespace that is in the process of being terminated?

   • ANamespaceLifecycle
   • BLimitRanger
   • CResourceQuota
   • DServiceAccount
   Reveal Solution Discussion Select an answer first