Kubernetes Security Monitoring Quiz

1. What does SIEM stand for in the context of Kubernetes security monitoring?

Security Information and Event Management

Secure Infrastructure Enforcement Module

Service Isolation and Encryption Management

Stateful Ingress and Egress Monitoring

2. Which runtime security tool detects suspicious process behavior in containers?

Falco

Helm

Calico

Etcd

3. What is the purpose of a ClusterRole in Kubernetes RBAC?

Define permissions at the cluster-wide level

Configure pod storage options

Manage container registry credentials

Control node scheduling

4. Which tool aggregates and visualizes Kubernetes metrics and logs?

Grafana

Kyverno

OPA

Falco

5. What does the principle of least privilege mean in Kubernetes?

Grant minimum required permissions to users and service accounts

Always run containers with root privileges

Restrict all external network traffic

Limit cluster to a single namespace

6. Which protocol is used by kubelet for secure communication with the API server?

HTTPS

HTTP

GRPC

SSH

7. What is container vulnerability scanning used to detect?

Known security flaws in container images

Network latency issues

Pod restart cycles

Storage capacity usage

8. Which Kubernetes security feature prevents containers from running as root?

SecurityContext

NetworkPolicy

ResourceQuota

LimitRange

9. What is the purpose of a Secrets object in Kubernetes?

Store sensitive data like passwords and API keys

Define resource quotas for namespaces

Configure pod scheduling rules

Monitor cluster node health

10. Which tool is used for distributed tracing in microservices environments?

Jaeger

CoreDNS

Kube-proxy

Kubelet

11. What is the primary purpose of Kubernetes audit logging?

Track all API server requests for security and compliance

Monitor pod CPU and memory usage

Manage container image registries

Control network traffic between nodes

12. Which audit level captures metadata about the request but not the request body?

RequestResponse

Metadata

Request

None

13. What is the primary function of a Service Account in Kubernetes security?

Authenticate pods to the API server

Store container images securely

Encrypt data in transit

Manage node certificates

14. Which monitoring tool is specifically designed for Kubernetes metrics collection?

Prometheus

Grafana

Fluentd

Jaeger

15. What does Pod Security Policy (PSP) restrict in Kubernetes?

Pod resource requests and limits only

Pod runtime behaviors like privileged mode and host access

Namespace creation and deletion

Service exposure to external networks

16. Which Kubernetes admission controller validates requests before they are persisted?

ValidatingAdmissionWebhook

ImagePullSecrets

ServiceAccount

PodSecurityPolicy

17. What is the purpose of a NetworkPolicy in Kubernetes?

Control ingress and egress traffic between pods

Manage CPU and memory limits

Define container image pull policies

Configure persistent storage access

18. Which tool is commonly used for centralized logging in Kubernetes clusters?

Prometheus

ELK Stack (Elasticsearch, Logstash, Kibana)

Helm

Istio

19. In Kubernetes, what does RBAC stand for?

Role-Based Access Control

Resource-Based Authentication Control

Runtime-Based Authorization Check

Registry-Based Access Credential

20. Which Kubernetes resource type is used to define audit logging policies?

AuditPolicy

LoggingRule

SecurityPolicy

EventLog

KCSA Kubernetes Security Monitoring Quiz