KCSA 무료 덤프문제 온라인 액세스

A container image istrojanizedby an attacker by compromising the build server. Based on the STRIDE threat modeling framework, which threat category best defines this threat?

• A.Repudiation
• B.Denial of Service
• C.Tampering
• D.Spoofing

Which security knowledge-base focuses specifically onoffensive tools, techniques, and procedures?

• A.MITRE ATT&CK
• B.CIS Controls
• C.OWASP Top 10
• D.NIST Cybersecurity Framework

In a Kubernetes environment, what kind of Admission Controller can modify resource manifests when applied to the Kubernetes API to fix misconfigurations automatically?

• A.MutatingAdmissionController
• B.ResourceQuota
• C.ValidatingAdmissionController
• D.PodSecurityPolicy

Which technology can be used to apply security policy for internal cluster traffic at the application layer of the network?

• A.Service Mesh
• B.Ingress Controller
• C.Container Runtime
• D.Network Policy

Which of the following statements regarding a container run with privileged: true is correct?

• A.A container run with privileged: true has no additional access to Secrets than if it were run with privileged: false.
• B.A container run with privileged: true on a node can access all Secrets used on that node.
• C.A container run with privileged: true within a Namespace can access all Secrets used within that Namespace.
• D.A container run with privileged: true within a cluster can access all Secrets used within that cluster.