A cluster administrator wants to ensure that only the control plane components can communicate with etcd. Which trust boundary control should they implement?

Use network policies to restrict access to etcd from worker nodes.

Place etcd on a separate network segment with no external access.

Configure etcd to use TLS with client certificates that are only issued to the API server.

Enable audit logging for all etcd requests.

Kubernetes and Cloud Native Security Associate (KCSA)

Domain 3Objective 6

Auditing and Monitoring KCSA Practice Questions (Page 6)

Part of the Kubernetes Security Fundamentals domain, which accounts for 22% of the KCSA exam. Linux Foundation does not publish an official question count, but from its 90-minute exam (~35–60 total, ~8–13 in this domain), expect 1–2 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

7concepts

22%of the exam

Questions 26–26

26application · medium
A cluster administrator wants to ensure that only the control plane components can communicate with etcd. Which trust boundary control should they implement?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to KCSA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Foundation. “KCSA” is a trademark of its owner, used for identification only.

Auditing and Monitoring KCSA Practice Questions (Page 6)

Questions 26–26

A cluster administrator wants to ensure that only the control plane components can communicate with etcd. Which trust boundary control should they implement?

Keep studying — Kubernetes Security Fundamentals