A company uses a cloud provider's managed Kubernetes service. They want to ensure that all communication between the Kubernetes API server and the kubelet on worker nodes is encrypted. Which control should they enable?

Network policies to restrict kubelet access

TLS encryption for all Kubernetes API communication

Which cloud provider security control is specifically designed to control network traffic between resources?

Identity and access management (IAM)

Network security groups (NSGs) or security lists

Which of the following is a customer responsibility in a SaaS (Software as a Service) model?

Configuring user access and permissions within the application

Applying network security patches to the application's host servers

Securing the physical data center where the application is hosted

Managing the underlying operating system patches

A company is subject to GDPR and needs to transfer personal data from their EU-based cloud environment to a cloud region in the US. They are considering using a cloud provider's data transfer service. What should they do to ensure compliance?

Obtain consent from each data subject

Encrypt the data during transfer

Use a private network connection for the transfer

Ensure the transfer is covered by an appropriate legal mechanism, such as standard contractual clauses

Kubernetes and Cloud Native Security Associate (KCSA)

Domain 1Objective 2

Cloud Provider and Infrastructure Security KCSA Practice Questions (Page 2)

Part of the Overview of Cloud Native Security domain, which accounts for 14% of the KCSA exam. Linux Foundation does not publish an official question count, but from its 90-minute exam (~35–60 total, ~5–8 in this domain), expect 1–1 from this objective — we provide 23 practice questions to prepare you well beyond it. (estimate)

23questions here

5free pages

4concepts

14%of the exam

Questions 6–10

6expert · hard
A company uses a cloud provider's managed Kubernetes service. They want to ensure that all communication between the Kubernetes API server and the kubelet on worker nodes is encrypted. Which control should they enable?
Select an answer first
7foundation · easy
Which cloud provider security control is specifically designed to control network traffic between resources?
Select an answer first
8foundation · easy
Which of the following is a customer responsibility in a SaaS (Software as a Service) model?
Select an answer first
9application · medium
A company uses a cloud provider's object storage to store sensitive documents. They want to protect the data if the storage media is stolen from the provider's data center. Which control should they enable?
Select an answer first
10expert · hard
A company is subject to GDPR and needs to transfer personal data from their EU-based cloud environment to a cloud region in the US. They are considering using a cloud provider's data transfer service. What should they do to ensure compliance?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to KCSA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Foundation. “KCSA” is a trademark of its owner, used for identification only.