Admission Control KCSA Practice Questions (Page 5)

Questions 21–24

1. 21foundation · easy

   Which of the following best describes the primary purpose of admission controllers in Kubernetes?

   • ATo store objects in etcd
   • BTo authenticate users and service accounts
   • CTo authorize API requests based on RBAC policies
   • DTo enforce policies and potentially modify API requests after authentication and authorization
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which admission controller is commonly used to enforce resource limits on a namespace by rejecting requests that exceed the configured quota?

   • ANamespaceLifecycle
   • BLimitRanger
   • CPodSecurity
   • DResourceQuota
   Reveal Solution Discussion Select an answer first
4. 23application · easy

   A user with valid credentials attempts to create a Pod that violates a custom admission policy. The request is rejected by a ValidatingAdmissionWebhook. Which sequence of events occurred?

   • AAuthentication → Authorization → Persist to etcd → Admission Control
   • BAuthentication → Admission Control → Authorization → Persist to etcd
   • CAuthorization → Authentication → Admission Control → Persist to etcd
   • DAuthentication → Authorization → Admission Control → Persist to etcd
   Reveal Solution Discussion Select an answer first
5. 24expert · medium

   You have both a MutatingAdmissionWebhook and a ValidatingAdmissionWebhook configured. The mutating webhook adds a default securityContext to every Pod. The validating webhook checks that the securityContext has a specific setting. A Pod creation request is submitted. In which order are the webhooks invoked?

   • AValidating webhook first, then mutating webhook.
   • BThe order depends on the order they are listed in the webhook configurations.
   • CMutating webhook first, then validating webhook.
   • DThey are invoked in parallel.
   Reveal Solution Discussion Select an answer first