Controller Manager KCSA Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which authentication method is commonly used for the kube-controller-manager to authenticate to the Kubernetes API server?

   • AUsername and password
   • BAnonymous access
   • CBearer tokens from the API server
   • DClient certificates
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A cluster administrator is hardening the kube-controller-manager. They want to ensure that the controller manager only listens on the loopback interface to minimize its network exposure. Which flag should they set?

   • A--port=0
   • B--bind-address=0.0.0.0
   • C--bind-address=127.0.0.1
   • D--secure-port=0
   Reveal Solution Discussion Select an answer first
4. 23application · easy

   A junior administrator is learning about the Kubernetes control plane. They ask: 'What is the primary role of the kube-controller-manager?' Which of the following is the most accurate answer?

   • AIt runs controllers that continuously reconcile the cluster's desired state with its actual state.
   • BIt is the primary entry point for all administrative commands.
   • CIt manages the network configuration for the cluster.
   • DIt stores the cluster's state and configuration.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   How can you apply the principle of least privilege to the kube-controller-manager?

   • ARun it with a dedicated service account that has only the necessary RBAC permissions
   • BUse the default service account in the kube-system namespace
   • CDisable RBAC for the controller manager to simplify access control
   • DGrant it cluster-admin permissions to ensure it can perform all functions
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   How can you restrict which API requests the kube-controller-manager can make?

   • ABy disabling the API server's authentication
   • BBy configuring RBAC roles and bindings for the controller manager's service account
   • CBy using the --insecure-port flag on the controller manager
   • DBy setting firewall rules on the controller manager's host
   Reveal Solution Discussion Select an answer first