Which statement about Secrets is correct?

The correct answer is C. Secrets data is base64 encoded and stored unencrypted by default. By default, Kubernetes stores Secret data as base64-encoded values in etcd without encryption, meaning they are not encrypted at rest unless additional encryption configurations are applied.

Submitted by chiamaka_o· May 4, 2026Kubernetes Fundamentals

Question

Options

AA Secret is part of a Pod specification.
BSecrets data is encrypted with the cluster private key by default.
CSecrets data is base64 encoded and stored unencrypted by default
DA Secret can only be used for confidential data

How the community answered

(32 responses)

A
3% (1)
B
3% (1)
C
88% (28)
D
6% (2)

Explanation

By default, Kubernetes stores Secret data as base64-encoded values in etcd without encryption, meaning they are not encrypted at rest unless additional encryption configurations are applied.

Topics

#Kubernetes Secrets#Data Encoding#Security Fundamentals#Resource Management

Community Discussion

No community discussion yet for this question.

Full KCNA Practice