3.7 Explain the Deployment of Kubernetes Connectors CLOUD-SECURITY-ENGINEER Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which of the following is a common network misconfiguration that can prevent a Kubernetes connector from working?

   • AThe cluster's pods cannot communicate with each other.
   • BThe cluster cannot reach the Prisma Cloud API.
   • CThe cluster's DNS is not configured.
   • DThe cluster's nodes are in different availability zones.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   After deploying a Kubernetes connector, an administrator wants to verify that the connector has the correct permissions to monitor resources. The connector is running, but the team is unsure if it can list pods and services. What is the most direct way to validate this?

   • ACheck the connector's pod logs for errors.
   • BUse `kubectl auth can-i --list --as=system:serviceaccount:<namespace>:<service-account>` to check permissions.
   • CVerify that the connector's deployment has the correct number of replicas.
   • DCheck the connector's service account name in the deployment YAML.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company is deploying a Kubernetes connector to a cluster that uses a private CA for its API server certificate. The connector is installed successfully, but it reports a connection error. The team has verified that the API server endpoint is reachable from the connector's pod. What configuration setting is most likely causing the issue?

   • AThe connector is using the wrong API server port (e.g., 8080 instead of 6443).
   • BThe connector is configured with the wrong service account name.
   • CThe connector's namespace does not have a network policy allowing egress to the API server.
   • DThe connector is missing the CA certificate bundle for the private CA.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A team is deploying a Kubernetes connector to a cluster that is managed by a third-party vendor. The vendor restricts direct access to the cluster's API server from the internet. The team needs to install the connector but cannot use `kubectl` from their local machine. What is the most appropriate installation method?

   • AUse a static manifest and apply it via the vendor's web console.
   • BUse a Helm chart and install it via a CI/CD pipeline that runs inside the cluster.
   • CUse `helm install` from a local machine with the API server endpoint configured.
   • DUse `kubectl apply` from a jump host that has network access to the API server.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which of the following is used as authentication credentials for a Kubernetes connector?

   • AA service account token.
   • BA cloud provider access key.
   • CA client certificate only.
   • DAn SSH private key.
   Reveal Solution Discussion Select an answer first