A company wants to implement the 4Cs defense-in-depth strategy but has limited budget. They need to prioritize security controls. Which approach best aligns with the 4Cs model?

Implement a few strong controls at the Cloud layer and skip the other layers

Implement all possible controls at the Container layer

Wait until a security incident occurs to decide where to invest

Implement basic controls at each layer, focusing on the most critical risks

A security team is implementing the 4Cs defense-in-depth strategy. They have already secured the Code layer by using signed images and scanning for vulnerabilities. Which next step best aligns with the layered approach?

Move all workloads to a single cloud region to simplify security

Grant all developers cluster-admin access to speed up deployments

Disable all container runtime features to reduce attack surface

Implement admission controllers to enforce image policies at the Cluster layer

Which statement best describes the relationship between the layers in the 4Cs model?

Each layer is completely independent and does not affect the others

The Cloud layer is the only layer that matters for security

The Code layer is the only layer that matters for security

Security at each layer builds upon the security of the previous layer

A company runs a multi-tenant Kubernetes cluster where each team has its own namespace. A security audit recommends isolating workloads to prevent one compromised team's pods from accessing another team's pods. Which set of measures addresses this at the appropriate 4Cs layers?

Scan images for vulnerabilities before deployment

Encrypt all secrets with a cloud KMS

Use a different container runtime for each team

Implement NetworkPolicies and enforce RBAC per namespace

Kubernetes and Cloud Native Security Associate (KCSA)

Domain 1Objective 1

The 4Cs of Cloud Native Security KCSA Practice Questions (Page 3)

Part of the Overview of Cloud Native Security domain, which accounts for 14% of the KCSA exam. Linux Foundation does not publish an official question count, but from its 90-minute exam (~35–60 total, ~5–8 in this domain), expect 1–1 from this objective — we provide 18 practice questions to prepare you well beyond it. (estimate)

18questions here

4free pages

4concepts

14%of the exam

Questions 11–15

11expert · medium
A company wants to implement the 4Cs defense-in-depth strategy but has limited budget. They need to prioritize security controls. Which approach best aligns with the 4Cs model?
Select an answer first
12application · medium
A security team is implementing the 4Cs defense-in-depth strategy. They have already secured the Code layer by using signed images and scanning for vulnerabilities. Which next step best aligns with the layered approach?
Select an answer first
13foundation · easy
In the 4Cs model, which layer is concerned with the security of the underlying infrastructure such as network, storage, and compute resources?
Select an answer first
14foundation · easy
Which statement best describes the relationship between the layers in the 4Cs model?
Select an answer first
15application · medium
A company runs a multi-tenant Kubernetes cluster where each team has its own namespace. A security audit recommends isolating workloads to prevent one compromised team's pods from accessing another team's pods. Which set of measures addresses this at the appropriate 4Cs layers?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to KCSA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Foundation. “KCSA” is a trademark of its owner, used for identification only.