A security auditor is reviewing a Kubernetes cluster and finds that containers are running with the default seccomp profile and no AppArmor profile. The auditor wants to reduce the risk of container escape. Which recommendation should they make?

Apply a custom seccomp profile that denies unnecessary system calls.

Set all containers to run as root to simplify management.

Mount the host's /var/run/docker.sock to allow easier monitoring.

Disable seccomp and AppArmor to improve performance.

A company uses a base image that is several years old and has many known vulnerabilities. They want to deploy a new application but are concerned about security. Which approach best balances security and operational needs?

Use the old base image but restrict the container's network access.

Use the old base image and rely on runtime security tools to detect attacks.

Use the old base image but run the container as non-root.

Update the base image to a current version and re-test the application.

Kubernetes and Cloud Native Security Associate (KCSA)

Domain 6Objective 2

Malicious Code Execution and Compromised Applications in Containers KCSA Practice Questions (Page 5)

Part of the Kubernetes Threat Model domain, which accounts for 16% of the KCSA exam. Linux Foundation does not publish an official question count, but from its 90-minute exam (~35–60 total, ~6–10 in this domain), expect 1–2 from this objective — we provide 22 practice questions to prepare you well beyond it. (estimate)

22questions here

5free pages

5concepts

16%of the exam

Questions 21–22

21application · medium
A security auditor is reviewing a Kubernetes cluster and finds that containers are running with the default seccomp profile and no AppArmor profile. The auditor wants to reduce the risk of container escape. Which recommendation should they make?
Select an answer first
22expert · medium
A company uses a base image that is several years old and has many known vulnerabilities. They want to deploy a new application but are concerned about security. Which approach best balances security and operational needs?
Select an answer first

Finished these 2 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to KCSA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Foundation. “KCSA” is a trademark of its owner, used for identification only.

Malicious Code Execution and Compromised Applications in Containers KCSA Practice Questions (Page 5)

Questions 21–22

A security auditor is reviewing a Kubernetes cluster and finds that containers are running with the default seccomp profile and no AppArmor profile. The auditor wants to reduce the risk of container escape. Which recommendation should they make?

A company uses a base image that is several years old and has many known vulnerabilities. They want to deploy a new application but are concerned about security. Which approach best balances security and operational needs?

Keep studying — Kubernetes Threat Model