Free KCSA Exam Braindumps
Kubernetes and Cloud Native Security Associate Questions 6–10 (page: 3)

Updated On: 10-Feb-2026

Which of the following is a control for Supply Chain Risk Management according to NIST 800-53 Rev.5?

  1. Access Control
  2. System and Communications Protection
  3. Supply Chain Risk Management Plan
  4. Incident Response

Answer(s): C



In a Kubernetes environment, what kind of Admission Controller can modify resource manifests when applied to the Kubernetes API to fix misconfigurations automatically?

  1. ValidatingAdmissionController
  2. PodSecurityPolicy
  3. MutatingAdmissionController
  4. ResourceQuota

Answer(s): C



By default, in a Kubeadm cluster, which authentication methods are enabled?

  1. OIDC, Bootstrap tokens, and Service Account Tokens
  2. X509 Client Certs, OIDC, and Service Account Tokens
  3. X509 Client Certs, Bootstrap Tokens, and Service Account Tokens
  4. X509 Client Certs, Webhook Authentication, and Service Account Tokens

Answer(s): C



A container running in a Kubernetes cluster has permission to modify host processes on the underlying node.

What combination of privileges and capabilities is most likely to have led to this privilege escalation?

  1. There is no combination of privileges and capabilities that permits this.
  2. hostPID and SYS_PTRACE
  3. hostPath and AUDIT_WRITE
  4. hostNetwork and NET_RAW

Answer(s): A



What is the purpose of the Supplier Assessments and Reviews control in the NIST 800-53 Rev. 5 set of controls for Supply Chain Risk Management?

  1. To evaluate and monitor existing suppliers for adherence to security requirements.
  2. To conduct regular audits of suppliers' financial performance.
  3. To establish contractual agreements with suppliers.
  4. To identify potential suppliers for the organization.

Answer(s): A



Viewing page 3 of 13
Viewing questions 11 - 15 out of 60 questions


Post your Comments and Discuss Linux Foundation KCSA exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!