Kcna Kubernetes And Cloud Native Associate · Free Practice Question Medium
Question 2
You need to ensure that sensitive data such as passwords and API keys are securely managed in your Kubernetes cluster. Which of the following should you use to achieve this? (Select two)
-
A
Annotations
-
B
Persistent Volumes
-
C
Service Accounts
-
D
ConfigMaps
-
E
Secrets
Reveal correct answers
Correct answers: C, E
A.
Annotations are for attaching arbitrary non-identifying metadata to objects but are not secure for storing sensitive information.
B.
While they can store data, Persistent Volumes are not designed specifically for securely managing sensitive data like passwords or API keys.
C.
For Kubernetes-native applications requiring API access, Service Accounts are a secure way to manage authentication and can be granted the least amount of privilege necessary.
D.
ConfigMaps are not designed for storing sensitive information; they are plaintext and can be accessed by any pod in the same namespace if RBAC isn’t configured to prevent it.
E.
Kubernetes Secrets are designed for storing sensitive information. They offer more security compared to other options like ConfigMaps or Environment Variables.
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
