A healthcare SaaS provider hosts multiple hospitals on a shared Kubernetes cluster. Each hospital's data must be isolated at the storage layer, and each hospital's application must only access its own data. The provider also needs to ensure that a compromised application in one hospital cannot access another hospital's data, even if it gains access to the underlying storage system. Which approach best meets these requirements?

Use a separate PersistentVolumeClaim (PVC) for each hospital, with RBAC limiting access to the PVC to the hospital's service account.

Use a single PVC for all hospitals and rely on directory permissions within the volume.

Use a single shared database with row-level security based on a tenant ID.

Use a NetworkPolicy to block access between hospital namespaces.

What is the purpose of storage isolation in a multi-tenant environment?

To improve the performance of storage I/O.

To simplify the backup process.

To increase the storage capacity available to each tenant.

To prevent one tenant from accessing another tenant's data.

What is the purpose of network policies in Kubernetes?

To control the flow of traffic between pods.

To limit the CPU and memory usage of pods.

To encrypt all traffic within the cluster.

To assign IP addresses to pods.

Kubernetes and Cloud Native Security Associate (KCSA)

Domain 1Objective 4

Isolation Techniques KCSA Practice Questions (Page 1)

Part of the Overview of Cloud Native Security domain, which accounts for 14% of the KCSA exam. Linux Foundation does not publish an official question count, but from its 90-minute exam (~35–60 total, ~5–8 in this domain), expect 1–1 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

11concepts

14%of the exam

Questions 1–5

1foundation · easy
Which of the following is a category of isolation technique used in cloud native environments?
Select an answer first
2expert · hard
A healthcare SaaS provider hosts multiple hospitals on a shared Kubernetes cluster. Each hospital's data must be isolated at the storage layer, and each hospital's application must only access its own data. The provider also needs to ensure that a compromised application in one hospital cannot access another hospital's data, even if it gains access to the underlying storage system. Which approach best meets these requirements?
Select an answer first
3foundation · easy
What is the purpose of storage isolation in a multi-tenant environment?
Select an answer first
4foundation · easy
What is the purpose of network policies in Kubernetes?
Select an answer first
5foundation · easy
Which resource can be limited using cgroups in a container environment?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to KCSA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Foundation. “KCSA” is a trademark of its owner, used for identification only.

Isolation Techniques KCSA Practice Questions (Page 1)

Questions 1–5

Which of the following is a category of isolation technique used in cloud native environments?

What is the purpose of storage isolation in a multi-tenant environment?

What is the purpose of network policies in Kubernetes?

Which resource can be limited using cgroups in a container environment?

Keep studying — Overview of Cloud Native Security