What is the primary purpose of a Public Key Infrastructure (PKI)?

To encrypt all network traffic between clients and servers

To store hashed passwords for user authentication

To provide a firewall for securing internal network segments

To manage the creation, distribution, and validation of digital certificates that bind public keys to identities

Which practice is considered a best practice for protecting the cluster CA private key?

Backing it up in a public repository for disaster recovery

Storing it in a Kubernetes Secret for easy access by all components

Sharing it with all cluster administrators for convenience

Keeping it on a dedicated, securely managed host with restricted access

A DevOps team is setting up a new Kubernetes cluster using kubeadm. They need to ensure that the kubelet can authenticate to the kube-apiserver. Which PKI component is responsible for issuing the kubelet client certificates?

The service account signing key

The kube-apiserver's serving certificate

Kubernetes and Cloud Native Security Associate (KCSA)

Domain 4Objective 5

PKI KCSA Practice Questions (Page 6)

Part of the Platform Security domain, which accounts for 16% of the KCSA exam. Linux Foundation does not publish an official question count, but from its 90-minute exam (~35–60 total, ~6–10 in this domain), expect 1–1 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

7concepts

16%of the exam

Questions 26–28

26foundation · easy
What is the primary purpose of a Public Key Infrastructure (PKI)?
Select an answer first
27foundation · easy
Which practice is considered a best practice for protecting the cluster CA private key?
Select an answer first
28application · medium
A DevOps team is setting up a new Kubernetes cluster using kubeadm. They need to ensure that the kubelet can authenticate to the kube-apiserver. Which PKI component is responsible for issuing the kubelet client certificates?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to KCSA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Foundation. “KCSA” is a trademark of its owner, used for identification only.

PKI KCSA Practice Questions (Page 6)

Questions 26–28

What is the primary purpose of a Public Key Infrastructure (PKI)?

Which practice is considered a best practice for protecting the cluster CA private key?

A DevOps team is setting up a new Kubernetes cluster using kubeadm. They need to ensure that the kubelet can authenticate to the kube-apiserver. Which PKI component is responsible for issuing the kubelet client certificates?

Keep studying — Platform Security