Section 7: Security (1-5)

What three requirements should be meet by a host in Kubernetes?

• Password based authentication disabled

• SSH Key based authentication

• Secure the physical or virtual infrastructure that hosts Kubernetes.

• Password based authentication enabled

• User authentication via LDAP

The first line of defense is controlling access to:

• API Server

• Kubernetes

• Pods

• ETCD Server

What of the following are authorization mechanisms we can set to define what can a user do with the API Server?

• RBAC

• Webhook Mode

• • Node Authorization

• ABAC

• DAC

All communications with the cluster between the various components such as the ETCD cluster, kube-controller-manager, scheduler, API Server, kubelet, kube-proxy, is secured using:

• SSL

• TLS

• HTTPS

• DTLS

• PGP

What of the following types of users are used to access a Kubernetes Cluster?

• End users

• Administrators

• Developers

• Bots

• Standard users

________________ that access the cluster to perform administrative tasks.

Fill the blank space with the type of user used to access a Kubernetes Cluster:

• End users

• Administrators

• Developers

• Bots

• Standard users

________________ that access the cluster to test or deploy applications.

Fill the blank space with the type of user used to access a Kubernetes Cluster:

• End users

• Administrators

• Developers

• Bots

• Standard users

________________ who access the applications deployed on the cluster. The security access is managed by the applications themselves.

Fill the blank space with the type of user used to access a Kubernetes Cluster

• End users

• Administrators

• Developers

• Bots

• Standard users

________________ accessing the cluster for integration purposes.

Fill the blank space with the type of user used to access a Kubernetes Cluster

• End users

• Administrators

• Developers

• Bots

• Standard users

We have two types of users:

• Administrators

• Developers

• End users

• Service Accounts

• Humans