Controls and Frameworks KCSA Practice Questions (Page 2)

Questions 6–9

1. 6foundation · easy

   A security team sets up a Kubernetes audit log that records all API requests and alerts when suspicious activity is detected. Which type of security control does this represent?

   • APhysical control
   • BCorrective control
   • CDetective control
   • DPreventive control
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the primary role of a security framework in an organization?

   • ATo replace the need for security policies and procedures
   • BTo provide a one-size-fits-all solution that works for every organization
   • CTo guarantee compliance with all regulatory requirements
   • DTo provide a structured set of guidelines and best practices for managing security risks
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A security engineer is configuring a Kubernetes cluster for a financial services customer. The customer requires that any attempt to create a Pod with a privileged container be blocked immediately at the API server. Which type of security control should the engineer implement to satisfy this requirement?

   • AA corrective control that automatically deletes any privileged Pod that is found running in the cluster
   • BA preventive control that uses an admission controller to reject the Pod creation request
   • CA compensating control that requires developers to sign a form acknowledging the risk before submitting privileged Pods
   • DA detective control that logs all Pod creation events to an audit log for later review
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which of the following is a well-known security framework that provides a common language for understanding and managing cybersecurity risk?

   • ATOGAF
   • BISO 9001
   • CNIST Cybersecurity Framework (CSF)
   • DITIL
   Reveal Solution Discussion Select an answer first