Attacker on the Network KCSA Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is a common risk of exposing a service via an Ingress controller without proper authentication or network restrictions?

   • AThe service's DNS name is hijacked
   • BThe service becomes inaccessible from within the cluster
   • CAttackers can reach the service directly from the internet and attempt to exploit vulnerabilities
   • DThe service's pods are automatically deleted
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which Kubernetes resource is used to define rules for allowing or denying traffic between pods?

   • APodSecurityPolicy
   • BService
   • CNetworkPolicy
   • DIngress
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A Kubernetes cluster is used for both production and development workloads. The security team wants to ensure that a compromised development pod cannot access production services. However, the development team needs to access a specific production API for integration testing. Which approach should be used?

   • AMove the production API to the development namespace.
   • BUse a service mesh to encrypt all traffic between the namespaces.
   • CUse NetworkPolicies to allow the specific development pod to access the production API while blocking all other cross-namespace traffic.
   • DUse RBAC to restrict the development team's access to the production namespace.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A security team wants to detect an attacker who has compromised a pod and is performing network scanning to find other services in the cluster. Which monitoring approach would be most effective?

   • AMonitor network flow logs for unusual connection attempts to multiple IPs and ports.
   • BUse a NetworkPolicy to block all traffic from the compromised pod.
   • CEnable audit logging for all kubectl commands.
   • DDeploy a service mesh to encrypt all pod-to-pod traffic.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company exposes a web application via an Ingress resource. The security team discovers that the Ingress controller is configured with HTTP only, and the backend services communicate over HTTP as well. An attacker could intercept traffic between the client and the backend. Which configuration change would most effectively mitigate this risk?

   • ASwitch from Ingress to a LoadBalancer service.
   • BUse a NetworkPolicy to restrict access to the Ingress controller.
   • CConfigure the Ingress to use TLS and enable TLS termination at the Ingress controller.
   • DConfigure the backend services to use HTTPS and enable TLS termination at the Ingress.
   Reveal Solution Discussion Select an answer first