nerdexam
Linux_Foundation

CKS · Question #49

Context For testing purposes, the kubeadm provisioned cluster 's API server was configured to allow unauthenticated and unauthorized access. Task First, secure the cluster 's API server configuring it

Sign in or unlock CKS to reveal the answer and full explanation for question #49. The question stem and answer options stay visible for context.

Submitted by andreas_gr· May 5, 2026Cluster Hardening

Question

Context For testing purposes, the kubeadm provisioned cluster 's API server was configured to allow unauthenticated and unauthorized access. Task First, secure the cluster 's API server configuring it as follows: . Forbid anonymous authentication . Use authorization mode Node,RBAC . Use admission controller NodeRestriction The cluster uses the Docker Engine as its container runtime . If needed, use the docker command to troubleshoot running containers. kubectl is configured to use unauthenticated and unauthorized access. You do not have to change it, but be aware that kubectl will stop working once you have secured the cluster . You can use the cluster 's original kubectl configuration file located at /etc/kubernetes/admin.conf to access the secured cluster.

Unlock CKS to see the answer

You've previewed enough free CKS questions. Unlock CKS for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#API Server Configuration#Authentication#Authorization#Admission Controllers
Full CKS Practice