Which security responsibility is primarily associated with the Cluster layer in the 4Cs model?

Securing the Kubernetes control plane and worker nodes

Reviewing application source code for security flaws

Managing cloud provider IAM roles

Scanning container images for vulnerabilities

A security engineer is designing a defense-in-depth strategy for a Kubernetes deployment. The team wants to ensure that even if an attacker compromises a container, they cannot easily access other containers on the same host. Which combination of measures aligns with the 4Cs layered defense approach?

Enable Kubernetes NetworkPolicies and run containers as non-root

Apply Kubernetes RBAC and audit logging

Use a private container registry and sign images

Encrypt etcd and use TLS for all API communication

Kubernetes and Cloud Native Security Associate (KCSA)

Domain 1Objective 1

The 4Cs of Cloud Native Security KCSA Practice Questions (Page 2)

Part of the Overview of Cloud Native Security domain, which accounts for 14% of the KCSA exam. Linux Foundation does not publish an official question count, but from its 90-minute exam (~35–60 total, ~5–8 in this domain), expect 1–1 from this objective — we provide 18 practice questions to prepare you well beyond it. (estimate)

18questions here

4free pages

4concepts

14%of the exam

Questions 6–10

6application · medium
A developer wants to ensure that a container image is built from a trusted base and does not contain known vulnerabilities. According to the 4Cs model, which layer is primarily responsible for this concern?
Select an answer first
7application · medium
A company runs a Kubernetes cluster on AWS EKS. A security review finds that a developer accidentally committed a database password to a public GitHub repository. The password is used by an application running in the cluster. According to the 4Cs model, which layer should the team focus on to prevent this from happening again?
Select an answer first
8foundation · easy
An organization wants to ensure that only authorized users can access the Kubernetes API server. According to the 4Cs model, which layer should be the primary focus for implementing this control?
Select an answer first
9foundation · easy
Which security responsibility is primarily associated with the Cluster layer in the 4Cs model?
Select an answer first
10application · medium
A security engineer is designing a defense-in-depth strategy for a Kubernetes deployment. The team wants to ensure that even if an attacker compromises a container, they cannot easily access other containers on the same host. Which combination of measures aligns with the 4Cs layered defense approach?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to KCSA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Foundation. “KCSA” is a trademark of its owner, used for identification only.

The 4Cs of Cloud Native Security KCSA Practice Questions (Page 2)

Questions 6–10

A developer wants to ensure that a container image is built from a trusted base and does not contain known vulnerabilities. According to the 4Cs model, which layer is primarily responsible for this concern?

An organization wants to ensure that only authorized users can access the Kubernetes API server. According to the 4Cs model, which layer should be the primary focus for implementing this control?

Which security responsibility is primarily associated with the Cluster layer in the 4Cs model?

Keep studying — Overview of Cloud Native Security