KCSA 試験問題を無料オンラインアクセス

What mechanism can I use to block unsigned images from running in my cluster?

• A.Using Pod Security Standards (PSS) to enforce validation of signatures.
• B.Enabling Admission Controllers to validate image signatures.
• C.Using PodSecurityPolicy (PSP) to enforce image signing and validation.
• D.Configuring Container Runtime Interface (CRI) to enforce image signing and validation.

You want to minimize security issues in running Kubernetes Pods. Which of the following actions can help achieve this goal?

• A.Sharing sensitive data among Pods in the same cluster to improve collaboration.
• B.Deploying Pods with randomly generated names to obfuscate their identities.
• C.Implement Pod Security standards in the Pod's YAML configuration.
• D.Running Pods with elevated privileges to maximize their capabilities.

What is the main reason an organization would use a Cloud Workload Protection Platform (CWPP) solution?

• A.To automate the deployment and management of containerized workloads.
• B.To optimize resource utilization and scalability of containerized workloads.
• C.To protect containerized workloads from known vulnerabilities and malware threats.
• D.To manage networking between containerized workloads in the Kubernetes cluster.

Which of the following statements correctly describes a container breakout?

• A.A container breakout is the process of escaping the container and gaining access to the cloud provider's infrastructure.
• B.A container breakout is the process of escaping the container and gaining access to the host operating system.
• C.A container breakout is the process of escaping the container and gaining access to the Pod's network traffic.
• D.A container breakout is the process of escaping a container when it reaches its resource limits.

What is a multi-stage build?

• A.A build process that involves multiple containers running simultaneously to speed up the image creation.
• B.A build process that involves multiple developers collaborating on building an image.
• C.A build process that involves multiple stages of image creation, allowing for smaller, optimized images.
• D.A build process that involves multiple repositories for storing container images.