Question 1

Why might NetworkPolicy resources have no effect in a Kubernetes cluster?

ANetworkPolicy resources are only enforced if the Kubernetes scheduler supports them.

BNetworkPolicy resources are only enforced if the networking plugin supports them.

CNetworkPolicy resources are only enforced for unprivileged Pods.

DNetworkPolicy resources are only enforced if the user has the right RBAC permissions.

Answer : B

Question 2

As a Kubernetes and Cloud Native Security Associate, a user can set up audit logging in a cluster. What is the risk of logging every event at the full RequestResponse level?

ANo risk, as it provides the most comprehensive audit trail.

BIncreased storage requirements and potential impact on performance.

CImproved security and easier incident investigation.

DReduced storage requirements and faster performance.

Answer : B

Question 3

Which of the following statements correctly describes a container breakout?

AA container breakout is the process of escaping the container and gaining access to the Pod's network traffic.

BA container breakout is the process of escaping a container when it reaches its resource limits.

CA container breakout is the process of escaping the container and gaining access to the cloud provider's infrastructure.

DA container breakout is the process of escaping the container and gaining access to the host operating system.

Answer : D

Question 4

What is the main reason an organization would use a Cloud Workload Protection Platform (CWPP) solution?

ATo protect containerized workloads from known vulnerabilities and malware threats.

BTo automate the deployment and management of containerized workloads.

CTo manage networking between containerized workloads in the Kubernetes cluster.

DTo optimize resource utilization and scalability of containerized workloads.

Answer : A

Question 5

Which technology can be used to apply security policy for internal cluster traffic at the application layer of the network?

ANetwork Policy

BIngress Controller

CContainer Runtime

DService Mesh