KCSA 무료 덤프문제 온라인 액세스

A container image istrojanizedby an attacker by compromising the build server. Based on the STRIDE threat modeling framework, which threat category best defines this threat?

• A.Spoofing
• B.Repudiation
• C.Denial of Service
• D.Tampering

What kind of organization would need to be compliant with PCI DSS?

• A.Non-profit organizations that handle sensitive customer data.
• B.Government agencies that collect personally identifiable information.
• C.Merchants that process credit card payments.
• D.Retail stores that only accept cash payments.

What is Grafana?

• A.A container orchestration platform for managing and scaling applications.
• B.A cloud-native distributed tracing system for monitoring microservices architectures.
• C.A platform for monitoring and visualizing time-series data.
• D.A cloud-native security tool for scanning and detecting vulnerabilities in Kubernetes clusters.

You want to minimize security issues in running Kubernetes Pods. Which of the following actions can help achieve this goal?

• A.Sharing sensitive data among Pods in the same cluster to improve collaboration.
• B.Deploying Pods with randomly generated names to obfuscate their identities.
• C.Running Pods with elevated privileges to maximize their capabilities.
• D.Implement Pod Security standards in the Pod's YAML configuration.

Which of the following statements regarding a container run with privileged: true is correct?

• A.A container run with privileged: true on a node can access all Secrets used on that node.
• B.A container run with privileged: true within a cluster can access all Secrets used within that cluster.
• C.A container run with privileged: true within a Namespace can access all Secrets used within that Namespace.
• D.A container run with privileged: true has no additional access to Secrets than if it were run with privileged: false.