CKS - Certified Kubernetes Security Specialist Practice Test
Gana confianza para CKS - Certified Kubernetes Security Specialist. Practica los conceptos, comprende las respuestas y refuerza tus conocimientos pregunta a pregunta.
Probar una preguntaDescripción y detalles del examen
CNCF Certified Kubernetes Security Specialist exam covering cluster hardening, network policies, runtime security, and supply chain security. Administered by CNCF as a performance-based (hands-on terminal) format exam. Key domains include Cluster Hardening, Cluster Setup and Hardening, Minimize Microservice Vulnerabilities and Monitoring, Logging and Runtime Security.
Preguntas de Muestra
Elige una respuesta y consulta la explicación para ver cómo funciona la práctica.
Which command shows the bound ClusterRoles and Roles that any subject would gain from being a member of group 'developers'? Scenario constraint: Kubernetes 1.34, containerd runtime, current CKS curriculum domain 'Cluster Hardening', and only upstream Kubernetes behavior should be assumed.
What is the PRIMARY security advantage of running a workload under the `runsc` (gVisor) RuntimeClass instead of runc? Scenario constraint: Kubernetes 1.34, containerd runtime, current CKS curriculum domain 'Cluster Hardening', and only upstream Kubernetes behavior should be assumed.
In a kubeadm cluster, which directory contains the PKI material whose CA private key compromise would let an attacker mint cluster-admin credentials? Scenario constraint: Kubernetes 1.34, containerd runtime, current CKS curriculum domain 'Cluster Hardening', and only upstream Kubernetes behavior should be assumed.
During a forensic investigation, an admin deletes the offending pod immediately to stop the attacker. What's the trade-off? Scenario constraint: Kubernetes 1.34, containerd runtime, current CKS curriculum domain 'Monitoring, Logging and Runtime Security', and only upstream Kubernetes behavior should be assumed.
Which is the best practice when consuming third-party Helm charts? Scenario constraint: Kubernetes 1.34, containerd runtime, current CKS curriculum domain 'Supply Chain Security', and only upstream Kubernetes behavior should be assumed.
Oportunidades profesionales y salario
Los rangos son cifras del mercado de EE. UU. salvo que se muestre un rango local.