Kubernetes and Cloud Native Security Associate (KCSA)
Domain 3Objective 6
Auditing and Monitoring KCSA Practice Questions (Page 3)
Part of the Kubernetes Security Fundamentals domain, which accounts for 22% of the KCSA exam. Linux Foundation does not publish an official question count, but from its 90-minute exam (~35–60 total, ~8–13 in this domain), expect 1–2 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)
26questions here
6free pages
7concepts
22%of the exam
Questions 11–15
- 11
What is the purpose of the 'level' field in a Kubernetes audit policy rule?
Select an answer first - 12
Which of the following audit log entries would most likely indicate a potential security incident?
Select an answer first - 13
Which of the following is considered a trust boundary in a Kubernetes cluster?
Select an answer first - 14
When a user runs 'kubectl get pods', what is the first component that receives the request?
Select an answer first - 15
When troubleshooting a security incident, which audit log field is most useful for identifying the actor who performed a suspicious action?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Foundation. “KCSA” is a trademark of its owner, used for identification only.