NEW
Font size
WorksheetsKubernetes Threat Model
Total questions: 10
Worksheet time: 5mins
In the context of Kubernetes threat modeling, what is the primary purpose of identifying trust boundaries within a cluster?
To optimize resource allocation for pods
To establish areas where security controls need to be applied to protect sensitive data
To improve load balancing efficiency
To facilitate communication between microservices
Which of the following represents a trust boundary in a Kubernetes cluster?
Between two pods in the same namespace
Between user-controlled space and cluster-controlled space
Between two containers in the same pod
Between two namespaces with the same RBAC policies
What is persistence in the context of Kubernetes security threats?
The ability to maintain pod uptime during node failures
The ability of an attacker to maintain access to a cluster after initial compromise
The process of storing data in persistent volumes
The configuration of long-running deployments
Which Kubernetes component is most commonly targeted in a Denial of Service (DoS) attack?
Container runtime
Container image registry
Pod networking plugin
API server
An attacker has gained initial access to a Kubernetes cluster. Which of the following methods could they use to achieve persistence?
Running a resource-intensive workload
Enabling audit logging
Creating a new service account with elevated privileges
Configuring network policies
What is the primary security concern with control plane to node communication in Kubernetes?
High latency affecting cluster performance
Incompatibility between different Kubernetes versions
Excessive bandwidth consumption
Potential exposure of sensitive data if communication is not encrypted
Which of the following attack vectors involves executing malicious code within a container?
Container escape or malicious code execution
etcd data exfiltration
API server flood attack
Network policy bypass
In Kubernetes threat modeling, why is understanding data flow important?
To optimize network bandwidth usage
To identify where sensitive data moves and where security controls are needed
To improve pod scheduling decisions
To reduce storage costs
What is a common mitigation strategy for Denial of Service risks in Kubernetes?
Disabling all authentication mechanisms
Implementing resource quotas and limits
Removing all network policies
Granting cluster-admin access to all users
Which of the following represents a network threat in a Kubernetes environment?
Unauthorized network access between pods or namespaces
A misconfigured PersistentVolume
A pod running with excessive CPU limits
An outdated container image tag
