Question: 5 SIMULATION Enable audit logs in the cluster, To Do so, enable the log backend, and ensure that 1. logs are stored at /var/log/kubernetes-logs.txt. 2. Log files are retained for 12 days. 3. at maximum, a number of 8 old audit logs files are retained. 4. Set the maximum size before getting rotated to 200MB Edit and extend the basic policy to log: 1. namespaces changes at RequestResponse 2. Log the request body of secrets changes in the namespace kube-system. 3. Log all other resources in core and extensions at the Request level. 4. Log "pods/portforward", "services/proxy" at Metadata level. 5. Omit the Stage RequestReceived 6. All other requests at the Metadata level

Linux_Foundation

CKS · Question #8

Question: 5 SIMULATION Enable audit logs in the cluster, To Do so, enable the log backend, and ensure that 1. logs are stored at /var/log/kubernetes-logs.txt. 2. Log files are retained for 12 days. 3.

Sign in or unlock CKS to reveal the answer and full explanation for question #8. The question stem and answer options stay visible for context.

Submitted by olafpl· May 5, 2026Monitoring, Logging, and Runtime Security

Question

Question: 5
SIMULATION
Enable audit logs in the cluster, To Do so, enable the log backend, and ensure that
logs are stored at /var/log/kubernetes-logs.txt.
Log files are retained for 12 days.
at maximum, a number of 8 old audit logs files are retained.
Set the maximum size before getting rotated to 200MB

Edit and extend the basic policy to log:
namespaces changes at RequestResponse
Log the request body of secrets changes in the namespace kube-system.
Log all other resources in core and extensions at the Request level.
Log "pods/portforward", "services/proxy" at Metadata level.
Omit the Stage RequestReceived
All other requests at the Metadata level

Unlock CKS to see the answer

You've previewed enough free CKS questions. Unlock CKS for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Unlock CKS - $49.99 / 30 days Sign in

Topics

#Kubernetes Audit Logging#Log Management#API Server Configuration#Security Policy

Full CKS Practice