A developer commits code that includes a database password in a configuration file. The security team wants to prevent this from happening again. Which practice is most effective?

Rotate the database password every month.

Encrypt the configuration file before committing it.

Add a comment in the code reminding developers not to commit secrets.

Use a secrets management solution and inject secrets at runtime.

A company wants to ensure that any change to a running container is reverted automatically and that rollbacks are fast and reliable. Which design principle best supports this goal?

Allow administrators to SSH into containers to apply hotfixes.

Use a configuration management tool to update files inside containers.

Store configuration in environment variables that can be changed at runtime.

Treat containers as immutable and deploy new versions instead of patching running ones.

Which testing approach exercises a running application to identify vulnerabilities?

Static application security testing (SAST)

Software composition analysis (SCA)

Dynamic application security testing (DAST)

Which policy ensures that only images signed by a trusted authority can be deployed?

Image signing and verification policy

What is the primary purpose of static application security testing (SAST)?

To monitor production traffic for anomalies

To analyze source code for vulnerabilities without executing the program

To test the application's behavior at runtime

To scan container images for known vulnerabilities

Kubernetes and Cloud Native Security Associate (KCSA)

Domain 1Objective 6

Workload and Application Code Security KCSA Practice Questions (Page 2)

Part of the Overview of Cloud Native Security domain, which accounts for 14% of the KCSA exam. Linux Foundation does not publish an official question count, but from its 90-minute exam (~35–60 total, ~5–8 in this domain), expect 1–1 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

8concepts

14%of the exam

Questions 6–10

6application · medium
A developer commits code that includes a database password in a configuration file. The security team wants to prevent this from happening again. Which practice is most effective?
Select an answer first
7application · medium
A company wants to ensure that any change to a running container is reverted automatically and that rollbacks are fast and reliable. Which design principle best supports this goal?
Select an answer first
8foundation · easy
Which testing approach exercises a running application to identify vulnerabilities?
Select an answer first
9foundation · easy
Which policy ensures that only images signed by a trusted authority can be deployed?
Select an answer first
10foundation · easy
What is the primary purpose of static application security testing (SAST)?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to KCSA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Foundation. “KCSA” is a trademark of its owner, used for identification only.