FirstTry
KCSAKubernetes and Cloud Native Security Associate

Practice Exam 2

5 of this form’s 60 questions, drawn from across its domains, free. The explanation on every one of them is free too, at every tier, and always will be.

  1. Question 1 of 5

    Cloud native security lifecycleOverview of Cloud Native Security

    A team runs a read-only container-specific operating system on its nodes. What does the page say that achieves?

  2. Question 2 of 5

    Controlling API accessKubernetes Cluster Component Security

    An administrator configures three authenticator modules on the API server. How are they used for one request?

  3. Question 3 of 5

    Pod Security StandardsKubernetes Security Fundamentals

    An application team needs a container under the Restricted profile to bind to a privileged port. Which capabilities configuration meets both requirements?

  4. Question 4 of 5

    User NamespacesKubernetes Threat Model

    An analyst notices that a Pod using user namespaces has been granted CAP_SYS_MODULE. What can the Pod actually do with it?

  5. Question 5 of 5

    Container ImagesPlatform Security

    A team sees a container held in Waiting with ImagePullBackOff. What ceiling does Kubernetes place on the growing retry delay?

0 of 60 completed

0%

The other 55 questions are the rest of this form: same 90 minute clock, same 75 cut score, and the same explanation on every question, which is never behind the wall. Practice Exam 2 of 2 on KCSA.

What this exam covers

  • Overview of Cloud Native Security8 questions / 14% of the exam
  • Kubernetes Cluster Component Security13 questions / 22% of the exam
  • Kubernetes Security Fundamentals13 questions / 22% of the exam
  • Kubernetes Threat Model10 questions / 16% of the exam
  • Platform Security10 questions / 16% of the exam
  • Compliance and Security Frameworks6 questions / 10% of the exam

Checking what you already have access to.

Every question is original, written from the published objectives. We never reproduce, paraphrase, or imitate real exam content, and neither should anything else you study from.