Compliance Frameworks KCSA Practice Questions (Page 2)

Questions 6–10

1. 6application · easy

   An organization is undergoing an ISO 27001 audit and must provide evidence of access control and monitoring in their Kubernetes cluster. Which evidence source should they prepare?

   • AThe output of kubectl get nodes.
   • BKubernetes audit logs showing API requests and user actions.
   • CA list of all container images used in the cluster.
   • DThe cluster's DNS configuration.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A multinational company operates Kubernetes clusters in multiple regions and must comply with GDPR. They need to ensure that personal data of EU citizens is processed only in approved regions. Which Kubernetes feature should they use to enforce this data residency requirement?

   • AEnable audit logging to track where data is processed.
   • BApply a ResourceQuota to limit resource usage in each region.
   • CUse a NetworkPolicy to block traffic to non-EU regions.
   • DUse node selectors and taints to restrict workloads to nodes located in approved regions.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is the primary purpose of Kubernetes audit logs in the context of compliance?

   • ATo improve application performance by logging all user interactions
   • BTo replace the need for external security monitoring tools
   • CTo provide a record of API requests and actions for security analysis and compliance evidence
   • DTo automatically remediate security vulnerabilities in the cluster
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A security auditor requires evidence that all administrative actions in a Kubernetes cluster are logged and retained for at least one year. The team currently has audit logging enabled but logs are stored locally on each control plane node and are overwritten after 30 days. What should they do to meet the auditor's requirement?

   • AIncrease the log rotation size on each control plane node to retain logs for one year.
   • BEnable audit logging on worker nodes to capture all administrative actions.
   • CConfigure audit logging to forward logs to a centralized, long-term storage system with a retention policy of at least one year.
   • DStore audit logs in etcd to ensure they are retained.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A security auditor requires evidence that all changes to a Kubernetes cluster are logged and that logs are tamper-proof. The team currently has audit logging enabled but logs are stored in a file on the control plane node. What should they do to meet the tamper-proof requirement?

   • AEncrypt the audit log file on the control plane node.
   • BStore audit logs in a ConfigMap to prevent tampering.
   • CSet file permissions to read-only on the audit log file.
   • DForward audit logs to a centralized, append-only storage system with integrity checks.
   Reveal Solution Discussion Select an answer first