The 4Cs of Cloud Native Security KCSA Practice Questions (Page 4)

Questions 16–18

1. 16foundation · easy

   How does the 4Cs model exemplify defense-in-depth?

   • AEach layer provides security controls that compensate for potential weaknesses in other layers
   • BOnly the outermost layer needs to be secured
   • CEach layer is independently secured with no reliance on other layers
   • DSecurity is applied only after an incident occurs
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   A development team discovers that a container image used in production contains a known vulnerability. According to the 4Cs model, which layer should be the primary focus for remediation?

   • AContainer
   • BCloud
   • CCluster
   • DCode
   Reveal Solution Discussion Select an answer first
3. 18expert · medium

   A security team is implementing the 4Cs defense-in-depth strategy. They have already secured the Cloud layer with network segmentation and the Cluster layer with RBAC and NetworkPolicies. They are now deciding which Container layer controls to implement. Which control best complements the existing layers?

   • ADisable all container capabilities
   • BRun containers as non-root and use read-only root filesystems
   • CEncrypt all container images
   • DUse a single container runtime for all workloads
   Reveal Solution Discussion Select an answer first