최신Linux Foundation Kubernetes and Cloud Native Security Associate - KCSA무료샘플문제

A. kubelet

B. Kubernetes API Server

C. Kubernetes Scheduler

D. Kubernetes Controller Manager

A. Kubernetes administrator

B. Cloud provider

C. Application developer

D. Namespace administrator

A. NetworkPolicy resources are only enforced if the networking plugin supports them.

B. NetworkPolicy resources are only enforced for unprivileged Pods.

C. NetworkPolicy resources are only enforced if the Kubernetes scheduler supports them.

D. NetworkPolicy resources are only enforced if the user has the right RBAC permissions.

A. The Scheduler is responsible for ensuring the security of the Kubernetes cluster and its components.

B. The Scheduler is responsible for assigning Pods to nodes based on resource availability and other constraints.

C. The Scheduler is responsible for monitoring and managing the health of the Kubernetes cluster.

D. The Scheduler is responsible for managing the deployment and scaling of applications in the Kubernetes cluster.

A. Zero Trust

B. Defense-in-Depth

C. Least Privilege

D. Secure-by-Design

A. When the priority is enabling strict security boundaries between tenants.

B. When the priority is enabling complete isolation between tenants.

C. When the priority is enabling resource sharing and efficiency between tenants.

D. When the priority is enabling fine-grained control over tenant resources.

A. gVisor is a lightweight virtualization technology for creating and managing secure, multi-tenant container and function-as-a-service (FaaS) workloads. At the same time, Firecracker is a user-space kernel that provides isolation and security for containers.

B. gVisor is a user-space kernel that provides isolation and security for containers. At the same time, Firecracker is a lightweight virtualization technology for creating and managing secure, multi-tenant container and function-as-a-service (FaaS) workloads.

C. gVisor and Firecracker are two names for the same technology, which provides isolation and security for containers.

D. gVisor and Firecracker are both container runtimes that can be used interchangeably.