Attacker on the Network KCSA Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which of the following is a common network attack vector that exploits the lack of encryption between pods in a Kubernetes cluster?

   • ADenial-of-service (DoS) via resource exhaustion
   • BMan-in-the-middle (MITM) traffic interception
   • CSupply chain attack via malicious image
   • DPrivilege escalation via container runtime exploit
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which tool is commonly used to capture and analyze network traffic in a Kubernetes cluster for security monitoring?

   • Akubectl exec
   • Btcpdump
   • Ckubectl logs
   • Dkubectl top
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A security analyst notices that a pod in the cluster is making DNS queries for a domain that is not associated with any known service. The analyst suspects that an attacker has compromised a pod and is using DNS to exfiltrate data. Which tool or technique would be most effective in detecting this type of activity?

   • AEnable audit logging for the DNS service and monitor for unusual query patterns.
   • BUse a NetworkPolicy to block all DNS traffic from the cluster.
   • CUse a network monitoring tool that captures all raw network packets and stores them indefinitely.
   • DDeploy a service mesh that encrypts all pod-to-pod communication.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   How can an attacker exploit DNS resolution to redirect traffic to a malicious service?

   • ABy using a NodePort to expose the DNS service externally
   • BBy modifying the Kubernetes Service definition to point to a different port
   • CBy sending a large number of DNS queries to overwhelm the DNS server
   • DBy poisoning the DNS cache so that a service name resolves to an attacker-controlled IP address
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Why is it important to encrypt traffic between pods in a Kubernetes cluster?

   • ATo prevent attackers who have access to the cluster network from reading sensitive data in transit
   • BTo improve the performance of pod-to-pod communication
   • CTo allow pods to communicate across different namespaces
   • DTo reduce the number of network policies required
   Reveal Solution Discussion Select an answer first