NEW
Font size
WorksheetsKubernetes Security Fundamentals
Total questions: 10
Worksheet time: 5mins
Which component is responsible for scheduling pods on nodes in a Kubernetes cluster?
API server
Scheduler
Kubelet
etcd
What is the purpose of Role-Based Access Control (RBAC) in Kubernetes?
To allocate resources between namespaces
To provide network segmentation
To manage permissions for users, groups, and service accounts
To control image downloads
Which security context setting prevents containers from running with root privileges?
runAsNonRoot: true
allowPrivilegeEscalation: true
privileged: true
fsGroup: 0
Which technology enforces security policies on traffic between Kubernetes pods at the application layer?
Network Policy
Ingress Controller
Container Runtime
Service Mesh
What is the default Pod Security Standard level that enforces the strictest restrictions on pod configuration?
Privileged
Baseline
Restricted
Permissive
How can you define and maintain consistent security policies for Kubernetes resources?
Manual scripting on an ad-hoc basis
Relying on manual audits
Using declarative YAML manifests as code
Configuring controls per resource by hand each time
What risk is mitigated by applying egress network policies to all workloads?
Service downtime
Data exfiltration
Node poisoning
Resource exhaustion
How should cluster secrets be protected?
Store in ConfigMaps
Enable at-rest encryption in etcd
Store in Pod specifications
Save on local disk
Which admission controller restricts pods from using Service.spec.externalIPs, helping block MITM attacks?
ResourceQuota
DenyServiceExternalIPs
ValidatingAdmissionWebhook
NodeRestriction
Which command creates a Kubernetes secret from literal values?
kubectl apply -f secret.yaml
kubectl secret add --literal key=value
kubectl create secret generic my-secret --literal=key=value
kubectl create secret my-secret --from-file=value.txt
