Section-Based – Overview of Cloud Native Security (KCSA)

1. Question

Category: KCSA – Overview of Cloud Native Security

A team is working to improve security in their container deployment process.

What does signing container images help ensure in this case?

Encrypts container images to protect sensitive data from unauthorized access.
Guarantees the image's integrity and validates its origin to prevent unauthorized changes.
Ensures that container images are compatible with all cloud platforms and environments.
Detects and prevents harmful code from being included in the container image.

2. Question

Category: KCSA – Overview of Cloud Native Security

Which organization publishes Kubernetes Security Benchmarks that can be applied to both self-hosted and managed platforms to ensure cluster hardening?

International Organization for Standardization (ISO)
Center for Internet Security (CIS)
National Institute of Standards and Technology (NIST)
SysAdmin, Audit, Network, and Security Institute

3. Question

Category: KCSA – Overview of Cloud Native Security

What is a security benefit of isolating workloads using containers?

RBAC policies in containers prevent attackers from accessing all workloads, even with compromised user credentials.
Containers eliminate the need for network segmentation between different workloads in the same cluster.
Containers allow updating and redeploying a specific workload without affecting others.
Containers automatically encrypt data in transit between all workloads without any configuration.

4. Question

Category: KCSA – Overview of Cloud Native Security

Which model clearly defines the security and operational responsibilities of the cloud provider and the cloud user within a Kubernetes-based environment?

Defense in Depth Model
Shared Responsibility Model
Application Security Model
Zero Trust Model