FirstTry
KCSAKubernetes and Cloud Native Security Associate

Practice Exam 1

5 of this form’s 60 questions, drawn from across its domains, free. The explanation on every one of them is free too, at every tier, and always will be.

  1. Question 1 of 5

    Overview of Cloud Native Security

    An administrator hardens runtime access to the API. What does the page name for workload security identity?

  2. Question 2 of 5

    Platform Security

    An administrator edits a long-running Deployment from myapp:v1 to myapp:latest. What becomes of the imagePullPolicy field on that container?

  3. Question 3 of 5

    Kubernetes Cluster Component Security

    A cluster runs both RBAC and webhook authorization. What happens when one module allows a request and another denies it?

  4. Question 4 of 5

    Kubernetes Security Fundamentals

    An application team needs a container under the Restricted profile to bind to a privileged port. Which capabilities configuration meets both requirements?

  5. Question 5 of 5

    Kubernetes Threat Model

    An analyst notices that a Pod using user namespaces has been granted CAP_SYS_MODULE. What can the Pod actually do with it?

0 of 60 completed

0%

The other 55 questions are the rest of this form: same 90 minute clock, same 75 cut score, and the same explanation on every question, which is never behind the wall. Practice Exam 1 of 2 on KCSA.

What this exam covers

  • Overview of Cloud Native Security8 questions / 14% of the exam
  • Kubernetes Cluster Component Security13 questions / 22% of the exam
  • Kubernetes Security Fundamentals13 questions / 22% of the exam
  • Kubernetes Threat Model10 questions / 16% of the exam
  • Platform Security10 questions / 16% of the exam
  • Compliance and Security Frameworks6 questions / 10% of the exam

Checking what you already have access to.

Every question is original, written from the published objectives. We never reproduce, paraphrase, or imitate real exam content, and neither should anything else you study from.