Compliance Frameworks KCSA Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which of the following is an example of evidence that can be used to support a compliance audit in Kubernetes?

   • AThe number of pods running in the cluster
   • BThe version of the Kubernetes dashboard
   • CAudit logs showing who accessed the cluster and what actions they performed
   • DThe name of the cloud provider
   Reveal Solution Discussion Select an answer first
2. 12expert · medium

   A company must comply with PCI DSS, which requires restricting access to cardholder data to only those with a legitimate business need. They have a Kubernetes cluster with multiple namespaces, one of which contains cardholder data. They want to ensure that only a specific group of developers can access that namespace. What is the most effective way to achieve this?

   • ACreate an RBAC role that grants access to the cardholder data namespace and bind it only to the authorized developer group.
   • BUse a NetworkPolicy to block all traffic to the cardholder data namespace except from authorized pods.
   • CSet a ResourceQuota on the cardholder data namespace to limit who can deploy there.
   • DEnable audit logging to monitor who accesses the namespace.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which Kubernetes feature is most directly used to enforce access control requirements from compliance frameworks like ISO 27001?

   • ARole-Based Access Control (RBAC)
   • BConfigMaps
   • CHorizontal Pod Autoscaler
   • DPersistentVolumes
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A security team needs to ensure that any change to a Kubernetes cluster that violates their compliance policy is automatically blocked. Which approach should they use?

   • AUse kubectl apply with the --dry-run flag.
   • BEnable audit logging and review logs weekly.
   • CSet up a cron job to check for policy violations daily.
   • DDeploy OPA/Gatekeeper with policies set to enforcement mode.
   Reveal Solution Discussion Select an answer first
6. 15expert · medium

   A security team wants to ensure that their Kubernetes cluster remains compliant with PCI DSS over time. They have implemented RBAC, NetworkPolicies, and audit logging. What additional step should they take to maintain continuous compliance?

   • ARemove NetworkPolicies to improve performance.
   • BRegularly scan the cluster for misconfigurations and policy violations using automated tools.
   • CGrant all developers cluster-admin access to simplify management.
   • DDisable audit logging to reduce overhead.
   Reveal Solution Discussion Select an answer first