Question 1

You are the Kubernetes cluster administrator and are concerned about Pod security. You want to enforce a policy that disallows running containers as root and prevents privilege escalation. Which two Kubernetes features can help enforce these policies? (select 2)

Options :

A : PodSecurityPolicy

B : OPA-Gatekeeper

C : RBAC

D : Service Mesh

E : Node Taints

Answer: A,B

Question 2

Which of the following Istio components is primarily responsible for enforcing policies like rate limiting and access control in the service mesh?

Options :

A : Envoy Proxy

B : Istio Gateway

C : Istio-Operator

D : Mixer

Answer: D

Question 3

Which of the following Kubernetes features or practices is least likely to provide effective cost management for a multi-tenant cluster?

Options :

A : Implementing resource quotas per namespace

B : Taints and tolerations for effective scheduling

C : Assigning every tenant a dedicated node pool

D : Using Horizontal Pod Autoscaler (HPA)

Answer: C

Question 4

'kubectl delete -n my-ns po,svc --all' will delete pods and services including uninitialized ones in the namespace 'my-ns'

Options :

A : FALSE

B : TRUE

Answer: B

Question 5

Which of the following is not a stop on the cloud native trailmap?

Options :

A : Microservices

B : CI/CD

C : Containerization

D : Software distribution

Answer: A

Free KCNA Mock Exam – Practice Online Confidently

Buying Options: