A team wants to use Jaeger for tracing requests across microservices in their Kubernetes cluster. What is a prerequisite for Jaeger to collect traces?

Applications must be instrumented to generate trace spans and propagate trace context

All pods must run in the same namespace

Prometheus must be configured as the metrics backend

The cluster must have a service mesh installed

A cluster administrator is troubleshooting a security issue where the kube-apiserver is crashing. They suspect it might be due to a misconfigured admission controller. Which metric would be MOST useful to confirm this?

container_network_receive_bytes_total

apiserver_admission_webhook_admission_duration_seconds

etcd_server_leader_changes_seen_total

A security team is designing an observability strategy for their Kubernetes cluster. They want to detect anomalies such as sudden spikes in error rates or unusual network traffic. Which approach would be MOST effective?

Use Jaeger to trace every request and analyze traces manually

Use Prometheus to collect metrics and set up alerts based on thresholds and rate changes

Use only audit logs to review all API requests manually

Use Grafana to visualize logs from all pods

A cluster administrator notices that the kube-apiserver is responding slowly. They want to determine whether the API server is overwhelmed by requests or if it is waiting on etcd. Which metric pair would BEST help differentiate these two conditions?

etcd_server_leader_changes_seen_total and etcd_server_proposals_failed_total

apiserver_request_duration_seconds and etcd_request_duration_seconds

kubelet_volume_stats_available_bytes and container_cpu_usage_seconds_total

workqueue_adds_total and workqueue_depth

A platform team needs to collect logs from all control plane components (kube-apiserver, kube-controller-manager, kube-scheduler) and from all pods running in the cluster. They want a centralized logging solution. Which approach BEST satisfies this requirement?

Enable Kubernetes native log rotation and rely on the kubelet to forward all logs to a central aggregator

Configure a DaemonSet that runs a log-collection agent on every node to forward container logs and control plane component logs to a central store

Use the Kubernetes API to stream logs from every pod and control plane component directly into an external SIEM

Deploy a single centralized logging pod in the default namespace and configure all other pods to send logs to it via syslog

Kubernetes and Cloud Native Security Associate (KCSA)

Domain 4Objective 3

Observability KCSA Practice Questions (Page 3)

Part of the Platform Security domain, which accounts for 16% of the KCSA exam. Linux Foundation does not publish an official question count, but from its 90-minute exam (~35–60 total, ~6–10 in this domain), expect 1–1 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

6concepts

16%of the exam

Questions 11–15

11application · medium
A team wants to use Jaeger for tracing requests across microservices in their Kubernetes cluster. What is a prerequisite for Jaeger to collect traces?
Select an answer first
12expert · hard
A cluster administrator is troubleshooting a security issue where the kube-apiserver is crashing. They suspect it might be due to a misconfigured admission controller. Which metric would be MOST useful to confirm this?
Select an answer first
13application · medium
A security team is designing an observability strategy for their Kubernetes cluster. They want to detect anomalies such as sudden spikes in error rates or unusual network traffic. Which approach would be MOST effective?
Select an answer first
14application · medium
A cluster administrator notices that the kube-apiserver is responding slowly. They want to determine whether the API server is overwhelmed by requests or if it is waiting on etcd. Which metric pair would BEST help differentiate these two conditions?
Select an answer first
15application · medium
A platform team needs to collect logs from all control plane components (kube-apiserver, kube-controller-manager, kube-scheduler) and from all pods running in the cluster. They want a centralized logging solution. Which approach BEST satisfies this requirement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to KCSA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Foundation. “KCSA” is a trademark of its owner, used for identification only.