最新的Kubernetes and Cloud Native認證 KCSA考試題庫

問題1

What is the difference between gVisor and Firecracker?

A. gVisor is a user-space kernel that provides isolation and security for containers. At the same time, Firecracker is a lightweight virtualization technology for creating and managing secure, multi-tenant container and function-as-a-service (FaaS) workloads.

B. gVisor and Firecracker are two names for the same technology, which provides isolation and security for containers.

C. gVisor is a lightweight virtualization technology for creating and managing secure, multi-tenant container and function-as-a-service (FaaS) workloads. At the same time, Firecracker is a user-space kernel that provides isolation and security for containers.

D. gVisor and Firecracker are both container runtimes that can be used interchangeably.

正確答案: A

說明：（僅 VCESoft 成員可見）

問題2

When should soft multitenancy be used over hard multitenancy?

A. When the priority is enabling fine-grained control over tenant resources.

B. When the priority is enabling resource sharing and efficiency between tenants.

C. When the priority is enabling complete isolation between tenants.

D. When the priority is enabling strict security boundaries between tenants.

正確答案: B

說明：（僅 VCESoft 成員可見）

問題3

In the event that kube-proxy is in a CrashLoopBackOff state, what impact does it have on the Pods running on the same worker node?

A. The Pod's security context restrictions cannot be enforced.

B. The Pod cannot mount persistent volumes through CSI drivers.

C. The Pods cannot communicate with other Pods in the cluster.

D. The Pod's resource utilization increases significantly.

正確答案: C

說明：（僅 VCESoft 成員可見）

問題4

When using a cloud provider's managed Kubernetes service, who is responsible for maintaining the etcd cluster?

A. Kubernetes administrator

B. Namespace administrator

C. Cloud provider

D. Application developer

正確答案: C

說明：（僅 VCESoft 成員可見）

問題5

How do Kubernetes namespaces impact the application of policies when using Pod Security Admission?

A. Each namespace can have only one active policy.

B. Namespaces are ignored; Pod Security Admission policies apply cluster-wide only.

C. Different policies can be applied to specific namespaces.

D. The default namespace enforces the strictest security policies by default.

正確答案: C

說明：（僅 VCESoft 成員可見）

問題6

Which standard approach to security is augmented by the 4C's of Cloud Native security?

A. Secure-by-Design

B. Zero Trust

C. Least Privilege

D. Defense-in-Depth

正確答案: D

說明：（僅 VCESoft 成員可見）

問題7

In a Kubernetes cluster, what are the security risks associated with using ConfigMaps for storing secrets?

A. Using ConfigMaps for storing secrets might make applications incompatible with the Kubernetes cluster.

B. Storing secrets in ConfigMaps can expose sensitive information as they are stored in plaintext and can be accessed by unauthorized users.

C. ConfigMaps store sensitive information in etcd encoded in base64 format automatically, which does not ensure confidentiality of data.

D. Storing secrets in ConfigMaps does not allow for fine-grained access control via RBAC.

正確答案: B

說明：（僅 VCESoft 成員可見）

最新的Linux Foundation Kubernetes and Cloud Native Security Associate - KCSA免費考試真題

最新更新

站內鏈接

聯系我們