Which of the following is an example of a security control in a Kubernetes environment?

A Kubernetes service that exposes an application to the internet

A Kubernetes namespace that is used for organizing resources

A container image that is built with the latest version of an application

A Kubernetes NetworkPolicy that restricts pod-to-pod communication

An organization wants to use a security framework to assess its Kubernetes security posture. Which of the following is a practical first step?

Disable all security features to start from a clean slate

Immediately implement all controls recommended by the framework without assessment

Map existing security controls and practices to the framework's categories and subcategories

Replace the existing security team with a third-party vendor

A company adopts the CIS Kubernetes Benchmark to improve its cluster security. What is the primary benefit of using this framework?

It automatically patches all vulnerabilities in the cluster

It replaces the need for continuous monitoring

It guarantees that the cluster is compliant with all regulations

It provides a set of best-practice configuration guidelines specifically for hardening Kubernetes

What is the primary purpose of a security control in a cloud native environment?

To replace the need for continuous monitoring by providing one-time protection at deployment

To eliminate all security risks and guarantee that no breach ever occurs

To ensure that all cloud native workloads are publicly accessible for ease of management

To reduce risk to an acceptable level by implementing measures that protect confidentiality, integrity, and availability

Kubernetes and Cloud Native Security Associate (KCSA)

Domain 1Objective 3

Controls and Frameworks KCSA Practice Questions (Page 1)

Part of the Overview of Cloud Native Security domain, which accounts for 14% of the KCSA exam. Linux Foundation does not publish an official question count, but from its 90-minute exam (~35–60 total, ~5–8 in this domain), expect 1–1 from this objective — we provide 9 practice questions to prepare you well beyond it. (estimate)

9questions here

2free pages

4concepts

14%of the exam

Questions 1–5

1foundation · easy
Which of the following is an example of a security control in a Kubernetes environment?
Select an answer first
2foundation · easy
An organization wants to use a security framework to assess its Kubernetes security posture. Which of the following is a practical first step?
Select an answer first
3foundation · easy
Which type of security control is designed to stop an attack or unauthorized action before it occurs?
Select an answer first
4foundation · easy
A company adopts the CIS Kubernetes Benchmark to improve its cluster security. What is the primary benefit of using this framework?
Select an answer first
5foundation · easy
What is the primary purpose of a security control in a cloud native environment?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to KCSA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Foundation. “KCSA” is a trademark of its owner, used for identification only.