Compliance Frameworks KCSA Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A company processes credit card transactions and must comply with PCI DSS. They run workloads in Kubernetes. Which Kubernetes configuration directly supports the PCI DSS requirement to restrict access to cardholder data?

   • AApply a NetworkPolicy that allows all ingress traffic to the cardholder data namespace.
   • BImplement RBAC roles that limit access to namespaces containing cardholder data to only authorized personnel.
   • CUse a single namespace for all workloads to simplify management and reduce complexity.
   • DConfigure horizontal pod autoscaling to handle peak transaction loads.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   In a Kubernetes environment, what role do compliance frameworks play?

   • AThey provide a common language and structure for assessing and demonstrating security and compliance posture
   • BThey are only relevant for on-premises data centers and do not apply to cloud-native environments
   • CThey automatically configure Kubernetes RBAC and network policies to meet all requirements
   • DThey define the exact Kubernetes version and container runtime that must be used
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is the primary purpose of a compliance framework in a cloud-native environment?

   • ATo automatically enforce all security policies without requiring any configuration or human intervention
   • BTo replace the need for internal security policies and risk assessments
   • CTo guarantee that an organization will never experience a security breach
   • DTo provide a structured set of controls and best practices that help organizations meet regulatory, legal, and industry requirements
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which compliance framework primarily focuses on the protection of personal data of individuals in the European Union?

   • AGDPR
   • BHIPAA
   • CPCI DSS
   • DSOC 2
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which approach is commonly used for continuous compliance monitoring in Kubernetes?

   • ARelying solely on the cloud provider's compliance certifications
   • BManually reviewing all configurations before each release
   • CDisabling audit logs to reduce overhead
   • DUsing policy-as-code tools like OPA/Gatekeeper to enforce and audit policies
   Reveal Solution Discussion Select an answer first