Compliance Frameworks KCSA Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A company must comply with SOC 2's logical access control requirement. They want to ensure that only authorized users can create or modify deployments in their Kubernetes cluster. Which configuration should they implement?

   • ACreate RBAC roles and bindings that grant deployment permissions only to specific users or groups.
   • BEnable audit logging to record all deployment changes.
   • CSet resource quotas on the deployment namespace.
   • DUse a NetworkPolicy to restrict access to the deployment API.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which compliance framework is specifically designed to protect cardholder data and applies to organizations that handle credit card transactions?

   • AISO 27001
   • BPCI DSS
   • CSOC 2
   • DGDPR
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A security team wants to continuously monitor their Kubernetes cluster for compliance with internal security policies. They need to detect misconfigurations and policy violations in real time. Which tool or approach should they use?

   • ARun a manual review of cluster configuration every quarter.
   • BEnable audit logging and review logs only after an incident occurs.
   • CUse kubectl get pods to check for running containers.
   • DDeploy a policy engine like OPA/Gatekeeper with audit and enforcement modes.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A healthcare company runs a Kubernetes cluster that stores PHI. They must demonstrate compliance with HIPAA. Which combination of Kubernetes features should they implement to directly support HIPAA's access control and audit requirements?

   • ARBAC for least-privilege access, NetworkPolicies to isolate workloads, and audit logging enabled with appropriate log retention.
   • BPodSecurity admission to enforce security policies, a service mesh for mTLS, and a backup solution for etcd.
   • CResourceQuotas to limit CPU and memory, HorizontalPodAutoscaler for scaling, and a default storage class.
   • DNode affinity rules, taints and tolerations, and a custom scheduler.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is the purpose of continuous compliance monitoring in a Kubernetes environment?

   • ATo replace the need for security policies
   • BTo periodically check compliance during annual audits only
   • CTo manually review logs once a month
   • DTo automatically detect and alert on compliance drift in real time
   Reveal Solution Discussion Select an answer first