Which cloud provider security control is used to encrypt data stored on disk?

Multi-factor authentication (MFA)

A company uses a cloud provider's managed Kubernetes service. They are concerned about the security of the container images they deploy. According to the shared responsibility model, who is responsible for scanning the images for vulnerabilities?

The customer, because they are responsible for the security of their workloads

The cloud provider, because they manage the container runtime

Both the customer and the provider share responsibility equally

The cloud provider, because they provide the registry

Which of the following is a best practice for secure access to cloud infrastructure?

Enabling multi-factor authentication (MFA) for all user accounts

Allowing direct SSH access from the internet to all instances

Granting all users full administrator privileges

Using shared access keys for all team members

How do cloud providers typically support customers in meeting compliance requirements?

By taking full responsibility for all customer data governance

By automatically making all customer data compliant with every regulation

By prohibiting customers from using regions that are not compliant

By providing compliance certifications and audit reports for their services

A company is moving a legacy application from an on-premises data center to a cloud IaaS environment. The security team is updating their incident response plan. Which responsibility remains with the company after the migration?

Replacing failed hardware in the host servers

Patching the guest operating system of the virtual machines

Securing the physical data center facilities

Managing the hypervisor software

Kubernetes and Cloud Native Security Associate (KCSA)

Domain 1Objective 2

Cloud Provider and Infrastructure Security KCSA Practice Questions (Page 3)

Part of the Overview of Cloud Native Security domain, which accounts for 14% of the KCSA exam. Linux Foundation does not publish an official question count, but from its 90-minute exam (~35–60 total, ~5–8 in this domain), expect 1–1 from this objective — we provide 23 practice questions to prepare you well beyond it. (estimate)

23questions here

5free pages

4concepts

14%of the exam

Questions 11–15

11foundation · easy
Which cloud provider security control is used to encrypt data stored on disk?
Select an answer first
12expert · hard
A company uses a cloud provider's managed Kubernetes service. They are concerned about the security of the container images they deploy. According to the shared responsibility model, who is responsible for scanning the images for vulnerabilities?
Select an answer first
13foundation · easy
Which of the following is a best practice for secure access to cloud infrastructure?
Select an answer first
14foundation · easy
How do cloud providers typically support customers in meeting compliance requirements?
Select an answer first
15application · medium
A company is moving a legacy application from an on-premises data center to a cloud IaaS environment. The security team is updating their incident response plan. Which responsibility remains with the company after the migration?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to KCSA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Foundation. “KCSA” is a trademark of its owner, used for identification only.