A company uses a cloud provider's managed Kubernetes service. They want to ensure that only authorized users can access the Kubernetes API server. Which combination of controls should they implement?

IAM roles and network security rules

Encryption at rest and in transit

A company runs a Kubernetes cluster on a cloud provider. They need to ensure that only the security team can access the cluster's audit logs, and that the logs are tamper-proof. Which combination of controls should they implement?

IAM roles to restrict access and a logging service with integrity protection

Network policies and encryption

A company is deploying a multi-tier application in a cloud VPC. They want to ensure that the web tier can only communicate with the application tier on a specific port. Which best practice should they implement?

Using a single subnet for all tiers

Network segmentation using security groups or firewall rules

Enabling multi-factor authentication for all users

Kubernetes and Cloud Native Security Associate (KCSA)

Domain 1Objective 2

Cloud Provider and Infrastructure Security KCSA Practice Questions (Page 5)

Part of the Overview of Cloud Native Security domain, which accounts for 14% of the KCSA exam. Linux Foundation does not publish an official question count, but from its 90-minute exam (~35–60 total, ~5–8 in this domain), expect 1–1 from this objective — we provide 23 practice questions to prepare you well beyond it. (estimate)

23questions here

5free pages

4concepts

14%of the exam

Questions 21–23

21application · medium
A company uses a cloud provider's managed Kubernetes service. They want to ensure that only authorized users can access the Kubernetes API server. Which combination of controls should they implement?
Select an answer first
22expert · hard
A company runs a Kubernetes cluster on a cloud provider. They need to ensure that only the security team can access the cluster's audit logs, and that the logs are tamper-proof. Which combination of controls should they implement?
Select an answer first
23application · medium
A company is deploying a multi-tier application in a cloud VPC. They want to ensure that the web tier can only communicate with the application tier on a specific port. Which best practice should they implement?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to KCSA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Foundation. “KCSA” is a trademark of its owner, used for identification only.

Cloud Provider and Infrastructure Security KCSA Practice Questions (Page 5)

Questions 21–23

A company uses a cloud provider's managed Kubernetes service. They want to ensure that only authorized users can access the Kubernetes API server. Which combination of controls should they implement?

A company runs a Kubernetes cluster on a cloud provider. They need to ensure that only the security team can access the cluster's audit logs, and that the logs are tamper-proof. Which combination of controls should they implement?

A company is deploying a multi-tier application in a cloud VPC. They want to ensure that the web tier can only communicate with the application tier on a specific port. Which best practice should they implement?

Keep studying — Overview of Cloud Native Security