Linux_Foundation
CKS · Question #44
You must complete this task on the following cluster/nodes: Cluster: KSCH00301 Master node: ksch00301-master Worker node: ksch00301-worker1 You can switch the cluster/configuration context using the f
Sign in or unlock CKS to reveal the answer and full explanation for question #44. The question stem and answer options stay visible for context.
Submitted by priya_blr· May 5, 2026Minimize Microservice Vulnerabilities
Question
You must complete this task on the following cluster/nodes:
Cluster: KSCH00301
Master node: ksch00301-master
Worker node: ksch00301-worker1
You can switch the cluster/configuration context using the following command:
kubectl config use-context KSCH00301
Your organization's security policy includes:
- ServiceAccounts must not automount API credentials
- ServiceAccount names must end in "-sa"
- Create a new ServiceAccount named frontend-sa in the existing namespace qa. Ensure the ServiceAccount does not automount API credentials.
- Using the manifest file at /home/candidate/KSCH00301/pod-manifest.yaml, create the Pod.
- Finally, clean up any unused ServiceAccounts in namespace qa.
Exhibit
Unlock CKS to see the answer
You've previewed enough free CKS questions. Unlock CKS for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#ServiceAccount Configuration#API Credential Security#Least Privilege#Resource Cleanup