Kubernetes and Cloud Native Security Associate (KCSA)
Domain 2Objective 2
Controller Manager KCSA Practice Questions (Page 1)
Part of the Kubernetes Cluster Component Security domain, which accounts for 22% of the KCSA exam. Linux Foundation does not publish an official question count, but from its 90-minute exam (~35–60 total, ~8–13 in this domain), expect 1–2 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)
25questions here
5free pages
6concepts
22%of the exam
Questions 1–5
- 1
A security team wants to set up monitoring to detect if the kube-controller-manager is failing to reconcile the desired state of the cluster. Which of the following metrics would be most useful for this purpose?
Select an answer first - 2
A security team is reviewing the kube-controller-manager configuration and finds that it is running with `--bind-address=0.0.0.0` and `--port=10252`. The cluster is on a shared network. Which of the following is the most significant security risk?
Select an answer first - 3
Which of the following is a recommended way to monitor the kube-controller-manager for security incidents?
Select an answer first - 4
A cluster administrator is configuring the kube-controller-manager to use TLS for its secure port. They have generated a certificate and key. Which flag should they use to specify the certificate file?
Select an answer first - 5
What is the purpose of enabling audit logging for the kube-controller-manager?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Foundation. “KCSA” is a trademark of its owner, used for identification only.