KCSA 無料問題集「Linux Foundation Kubernetes and Cloud Native Security Associate」

（A）Storing secrets in ConfigMaps can expose sensitive information as they are stored in plaintext and can be accessed by unauthorized users.

（B）ConfigMaps store sensitive information in etcd encoded in base64 format automatically, which does not ensure confidentiality of data.

（C）Using ConfigMaps for storing secrets might make applications incompatible with the Kubernetes cluster.

（D）Storing secrets in ConfigMaps does not allow for fine-grained access control via RBAC.

（A）Replication controller, Endpoints controller, Namespace controller, and ServiceAccounts controller

（B）Job controller, CronJob controller, and DaemonSet controller

（C）Pod, Service, and Ingress controller

（D）Namespace controller, ConfigMap controller, and Secret controller

（A）To manage networking in a Kubernetes cluster.

（B）To monitor and analyze performance metrics of a Kubernetes cluster.

（C）To manage certificates and ensure secure communication in a Kubernetes cluster.

（D）To automate the scaling of containers in a Kubernetes cluster.

（A）By implementing network segmentation to isolate the API server from the rest of the cluster, preventing the attack from spreading.

（B）By increasing the resources allocated to the API server, allowing it to handle a higher volume of requests.

（C）By implementing rate limiting and throttling mechanisms on the API server to restrict the number of requests allowed.

（D）By distributing the workload across multiple API servers, reducing the load on each server.

（A）System and Communications Protection

（B）Access Control

（C）Incident Response

（D）Supply Chain Risk Management Plan

（A）privileged: true

（B）pod-security.kubernetes.io/enforce: baseline

（C）privileged: false

（D）pod.security.kubernetes.io/privileged: false

（A）Kubelet supports TLS authentication and encryption for secure communication with the API server.

（B）Kubelet does not have any built-in security features.

（C）Kubelet requires root access to interact with the host system.

（D）Kubelet runs as a privileged container by default.