CNCF Kubernetes and Cloud Native Security Associate (KCSA) - 340 Questions

1. A security architect is explaining the 4Cs of Cloud Native Security to a new team. Which layer of the 4Cs model is considered the outermost layer and serves as the foundation that all inner layers depend upon?

2. A company is deploying a Kubernetes workload on a managed cloud provider. A developer argues that because they are using containers, they do not need to worry about the underlying cloud infrastructure security. Which statement best explains why this reasoning is flawed according to the 4Cs model?

3. In the context of cloud native security, which security control is the primary responsibility of the cloud provider — not the customer — when using an Infrastructure as a Service (IaaS) model?

4. A platform team is hardening the host operating systems running Kubernetes nodes. Which practice is considered a fundamental host hardening control for Kubernetes worker nodes?

5. A company wants to prevent hardcoded secrets from entering their container images. Which Code layer security control directly addresses this risk?