Your organization's security policy includes: - ServiceAccounts must not automount API credentials - ServiceAccount names must end in "-sa" The Pod specified in the manifest file `/home/candidate/KSCH00301/pod-manifest.yaml` fails to schedule because of an incorrectly specified ServiceAccount. Complete the following tasks: 1. Create a new ServiceAccount named `frontend-sa` in the existing namespace `qa`. Ensure the ServiceAccount does not automount API credentials. 2. Using the manifest file at `/home/candidate/KSCH00301/pod-manifest.yaml`, create the Pod. 3. Finally, clean up any unused ServiceAccounts in namespace `qa`.

Linux_Foundation

CKS · Question #50

Your organization's security policy includes: ServiceAccounts must not automount API credentials ServiceAccount names must end in "-sa" The Pod specified in the manifest file /home/candidate/KSCH00301

Sign in or unlock CKS to reveal the answer and full explanation for question #50. The question stem and answer options stay visible for context.

Submitted by rania.sa· May 4, 2026Minimize Microservice Vulnerabilities

Question

Your organization's security policy includes:
ServiceAccounts must not automount API credentials
ServiceAccount names must end in "-sa"

The Pod specified in the manifest file /home/candidate/KSCH00301/pod-manifest.yaml fails to schedule because of an incorrectly specified ServiceAccount.
Complete the following tasks:
Create a new ServiceAccount named frontend-sa in the existing namespace qa. Ensure the ServiceAccount does not automount API credentials.
Using the manifest file at /home/candidate/KSCH00301/pod-manifest.yaml, create the Pod.
Finally, clean up any unused ServiceAccounts in namespace qa.

Unlock CKS to see the answer

You've previewed enough free CKS questions. Unlock CKS for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Unlock CKS - $49.99 / 30 days Sign in

Topics

#ServiceAccounts#Security Policy#API Access Control#Least Privilege

Full CKS Practice