KCSA 試験問題を無料オンラインアクセス

Which security knowledge-base focuses specifically onoffensive tools, techniques, and procedures?

• A.OWASP Top 10
• B.CIS Controls
• C.NIST Cybersecurity Framework
• D.MITRE ATT&CK

A container image istrojanizedby an attacker by compromising the build server. Based on the STRIDE threat modeling framework, which threat category best defines this threat?

• A.Tampering
• B.Repudiation
• C.Denial of Service
• D.Spoofing

What is the purpose of the Supplier Assessments and Reviews control in the NIST 800-53 Rev. 5 set of controls for Supply Chain Risk Management?

• A.To identify potential suppliers for the organization.
• B.To establish contractual agreements with suppliers.
• C.To evaluate and monitor existing suppliers for adherence to security requirements.
• D.To conduct regular audits of suppliers' financial performance.

What was the name of the precursor to Pod Security Standards?

• A.Kubernetes Security Context
• B.Container Security Standards
• C.Container Runtime Security
• D.Pod Security Policy

What is a multi-stage build?

• A.A build process that involves multiple stages of image creation, allowing for smaller, optimized images.
• B.A build process that involves multiple repositories for storing container images.
• C.A build process that involves multiple containers running simultaneously to speed up the image creation.
• D.A build process that involves multiple developers collaborating on building an image.