Online Access Free KCSA Exam Questions

Which of the following statements best describes the role of the Scheduler in Kubernetes?

• A.The Scheduler is responsible for managing the deployment and scaling of applications in the Kubernetes cluster.
• B.The Scheduler is responsible for assigning Pods to nodes based on resource availability and other constraints.
• C.The Scheduler is responsible for monitoring and managing the health of the Kubernetes cluster.
• D.The Scheduler is responsible for ensuring the security of the Kubernetes cluster and its components.

A container running in a Kubernetes cluster has permission to modify host processes on the underlying node.
What combination of privileges and capabilities is most likely to have led to this privilege escalation?

• A.hostPID and SYS_PTRACE
• B.hostPath and AUDIT_WRITE
• C.There is no combination of privileges and capabilities that permits this.
• D.hostNetwork and NET_RAW

What is the main reason an organization would use a Cloud Workload Protection Platform (CWPP) solution?

• A.To optimize resource utilization and scalability of containerized workloads.
• B.To automate the deployment and management of containerized workloads.
• C.To protect containerized workloads from known vulnerabilities and malware threats.
• D.To manage networking between containerized workloads in the Kubernetes cluster.

A container image istrojanizedby an attacker by compromising the build server. Based on the STRIDE threat modeling framework, which threat category best defines this threat?

• A.Denial of Service
• B.Spoofing
• C.Repudiation
• D.Tampering

A Kubernetes cluster tenant can launch privileged Pods in contravention of therestricted Pod Security Standardmandated for cluster tenants and enforced by the built-inPodSecurity admission controller.
The tenant has full CRUD permissions on the namespace object and the namespaced resources. How did the tenant achieve this?

• A.By deleting the PodSecurity admission controller deployment running in their namespace.
• B.By tampering with the namespace labels.
• C.By using higher-level access credentials obtained reading secrets from another namespace.
• D.The scope of the tenant role means privilege escalation is impossible.