Question 1

What is an effective security measure in Kubernetes to mitigate risks from an attacker present on the network?

Options :

A : Implementing resource quotas to limit the use of cluster resources by pods

B : Encrypting data in transit between pods and services within the cluster

C : Automating the deployment process of pods and services

D : Utilizing load balancers to distribute network traffic evenly across pods

Answer: B

Question 2

What is the primary security advantage of using client certificate authentication for Kubernetes API server access?

Options :

A : To enable rapid deployment of Kubernetes resources

B : To provide a secure method of authentication that minimizes the risk of credential theft

C : To optimize the network traffic flow within the Kubernetes cluster

D : To facilitate the integration of Kubernetes with cloud-based storage services

Answer: B

Question 3

Which of the following is a key benefit of implementing a Service Mesh in a cloud-native application architecture from a security perspective?

Options :

A : Automatic scaling of application resources

B : Simplified service discovery and load balancing

C : Enhanced traffic encryption and fine-grained access control

D : Reduced need for application-level logging

Answer: C

Question 4

What is a key security measure for the Kubernetes Controller Manager to prevent unauthorized control of cluster components?

Options :

A : Configuring Horizontal Pod Autoscaling for the Controller Manager

B : Enabling Role-Based Access Control (RBAC) for the Controller Manager-s operations

C : Implementing network policies specific to the Controller Manager

D : Regularly updating container runtime environments in the cluster

Answer: B

Question 5

Which practice is most effective in securing workload and application code in a cloud-native environment against unauthorized access and data breaches?

Options :

A : Implementing auto-scaling for workloads

B : Performing regular network penetration testing

C : Enforcing role-based access control (RBAC) at the application level

D : Using container orchestration tools for deployment automation

Answer: C