Free Linux Foundation KCSA Exam Questions

Become Linux Foundation Certified with updated KCSA exam questions and correct answers

Page: 1 / 59

Total 294 Questions | Updated On: Sep 24, 2026

Add To Cart

Question 1

What is the role of a Certificate Authority (CA) in the PKI setup of a Kubernetes cluster?

A : To provide load balancing between different Kubernetes services

B : To manage the distribution of secrets within the Kubernetes cluster

C : To issue and manage digital certificates for secure communication within the cluster

D : To optimize network traffic routing within the Kubernetes environment

Answer: C

Question 2

What does the 'cluster-admin' ClusterRole enable when used in a RoleBinding?

A : It gives full control over every resource in the role binding's namespace, not including the namespace object for isolation purposes.

B : It gives full control over every resource in the cluster and in all namespaces.

C : It gives full control over every resource in the role binding's namespace, including the namespace itself.

D : It allows read/write access to most resources in the role binding's namespace. This role does not allow write access to resource quota, to the namespace itself, and to EndpointSlices (or Endpoints).

Answer: B

Question 3

By default, in a Kubeadm cluster, which authentication methods are enabled?

A : OIDC, Bootstrap tokens, and Service Account Tokens

B : X509 Client Certs, OIDC, and Service Account Tokens

C : X509 Client Certs, Bootstrap Tokens, and Service Account Tokens

D : X509 Client Certs, Webhook Authentication, and Service Account Tokens

Answer: C

Question 4

By default, in a Kubeadm cluster, which authentication methods are enabled?

A : OIDC, Bootstrap tokens, and Service Account Tokens

B : X509 Client Certs, OIDC, and Service Account Tokens

C : X509 Client Certs, Bootstrap Tokens, and Service Account Tokens

D : X509 Client Certs, Webhook Authentication, and Service Account Tokens

Answer: C

Question 5

A Kubernetes cluster tenant can launch privileged pods in contravention of the restricted Pod Security Standard mandated for cluster tenants and enforced by the built-in PodSecurity admission controller. The tenant has full CRUD permissions on the namespace object and the namespaced resources. How did the tenant achieve this?

A : The scope of the tenant role means privilege escalation is impossible.

B : By tampering with the namespace labels.

C : By deleting the PodSecurity admission controller deployment running in their namespace.

D : By using higher-level access credentials obtained reading secrets from another namespace.

Answer: B

Page: 1 / 59

Total 294 Questions | Updated On: Sep 24, 2026

Add To Cart