A security architect is designing a defense-in-depth strategy for a Kubernetes deployment. They want to ensure that even if an attacker compromises a container, they cannot easily access the host operating system. Which combination of measures across the 4Cs layers would best achieve this?

Enable Kubernetes NetworkPolicies and use a private container registry

Use a container runtime with strong isolation, such as gVisor, and run containers as non-root

Apply RBAC and use audit logging

Encrypt all data at rest and in transit

A company wants to implement the 4Cs defense-in-depth strategy. They have already secured the Cloud layer by using a private VPC and encrypted storage. What should they do next to build on this foundation?

Disable all network policies to simplify the environment

Only secure the Code layer because it is the most important

Skip the Cluster layer and focus on Container security

Secure the Cluster layer by enabling RBAC and restricting API server access

Which of the following correctly lists the four layers of cloud native security as defined by the 4Cs model?

Cloud, Container, Cluster, Code

Code, Container, Cluster, Cloud

Cloud, Cluster, Container, Code

Cluster, Cloud, Container, Code

Kubernetes and Cloud Native Security Associate (KCSA)

Domain 1Objective 1

The 4Cs of Cloud Native Security KCSA Practice Questions (Page 1)

Part of the Overview of Cloud Native Security domain, which accounts for 14% of the KCSA exam. Linux Foundation does not publish an official question count, but from its 90-minute exam (~35–60 total, ~5–8 in this domain), expect 1–1 from this objective — we provide 18 practice questions to prepare you well beyond it. (estimate)

18questions here

4free pages

4concepts

14%of the exam

Questions 1–5

1expert · medium
A security architect is designing a defense-in-depth strategy for a Kubernetes deployment. They want to ensure that even if an attacker compromises a container, they cannot easily access the host operating system. Which combination of measures across the 4Cs layers would best achieve this?
Select an answer first
2application · medium
A company wants to implement the 4Cs defense-in-depth strategy. They have already secured the Cloud layer by using a private VPC and encrypted storage. What should they do next to build on this foundation?
Select an answer first
3foundation · easy
Which of the following correctly lists the four layers of cloud native security as defined by the 4Cs model?
Select an answer first
4foundation · easy
In the 4Cs model, which layer is most directly concerned with the security of the application's source code and its dependencies?
Select an answer first
5expert · medium
A company is deploying a Kubernetes cluster on a public cloud. They have a compliance requirement to ensure that all data at rest is encrypted. According to the 4Cs model, which layers should they address to meet this requirement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to KCSA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Foundation. “KCSA” is a trademark of its owner, used for identification only.

The 4Cs of Cloud Native Security KCSA Practice Questions (Page 1)

Questions 1–5

A security architect is designing a defense-in-depth strategy for a Kubernetes deployment. They want to ensure that even if an attacker compromises a container, they cannot easily access the host operating system. Which combination of measures across the 4Cs layers would best achieve this?

A company wants to implement the 4Cs defense-in-depth strategy. They have already secured the Cloud layer by using a private VPC and encrypted storage. What should they do next to build on this foundation?

Which of the following correctly lists the four layers of cloud native security as defined by the 4Cs model?

In the 4Cs model, which layer is most directly concerned with the security of the application's source code and its dependencies?

A company is deploying a Kubernetes cluster on a public cloud. They have a compliance requirement to ensure that all data at rest is encrypted. According to the 4Cs model, which layers should they address to meet this requirement?

Keep studying — Overview of Cloud Native Security