Question 1

Which of the following is a key benefit of implementing a Service Mesh in a cloud-native application architecture from a security perspective?

Options :

A : Automatic scaling of application resources

B : Simplified service discovery and load balancing

C : Enhanced traffic encryption and fine-grained access control

D : Reduced need for application-level logging

Answer: C

Question 2

Why is it important to enable and configure Kubelet client certificate rotation in a Kubernetes cluster?

Options :

A : To improve the performance efficiency of the Kubelet

B : To ensure efficient resource allocation by the Kubelet

C : To facilitate smoother upgrades of Kubelet software

D : To enhance security through regular updating of authentication credentials

Answer: D

Question 3

Which security practice is most effective in preventing unauthorized or compromised container images from being deployed in a Kubernetes environment?

Options :

A : Regularly updating Kubernetes and its dependencies

B : Implementing continuous integration/continuous deployment (CI/CD) pipelines

C : Enforcing image scanning and vulnerability assessment

D : Using network policies to control pod-to-pod communication

Answer: C

Question 4

Why is setting Pod Security Admissions (PSA) to ‘audit’ mode beneficial during the initial implementation phase?

Options :

A : To improve the data processing efficiency within the cluster

B : To manage the allocation of resources based on security policy evaluation

C : To record policy violations for assessment, allowing administrators to fine-tune security policies before enforcement

D : To optimize the distribution of network traffic among microservices

Answer: C

Question 5

What is the primary security benefit of isolating Kubernetes service traffic using a Service Mesh like Istio or Linkerd?

Options :

A : To enhance the auto-scaling capabilities of services based on traffic

B : To enable automatic routing and load balancing of service requests

C : To provide encrypted communication and fine-grained access control between services

D : To improve the efficiency of resource utilization among services

Answer: C