RBAC and Security Flashcards
6 cards from real CKA practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 RBAC and Security flashcards as text
What does RBAC stand for in Kubernetes?
Answer: Role-Based Access Control
RBAC (Role-Based Access Control) regulates access to Kubernetes resources based on the roles assigned to users or service accounts.
What is a Kubernetes Secret?
Answer: An object that stores sensitive data like passwords and tokens
Secrets store sensitive information like passwords, API keys, and certificates, keeping them separate from Pod specs and container images.
What is a ServiceAccount in Kubernetes?
Answer: An identity for processes running in Pods to interact with the API server
ServiceAccounts provide an identity for Pods to authenticate with the Kubernetes API server, controlling what resources processes can access.
What is the principle of least privilege?
Answer: Granting only the minimum permissions needed to perform a task
The principle of least privilege means granting users and processes only the minimum level of access needed to perform their specific functions, reducing security risk.
What is a NetworkPolicy in Kubernetes?
Answer: A resource that controls network traffic flow between Pods
NetworkPolicies define rules for which Pods can communicate with each other and with external endpoints, implementing network-level security.
What is Pod Security context used for?
Answer: Defining privilege and access control settings for Pods and containers
Security context defines security settings like user IDs, group IDs, capabilities, and read-only filesystems for Pods and their containers.
How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy
Sources & references
Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy
- docs.linuxfoundation.org — Exam format, test delivery, passing score, renewal, retake policy, score release, score validity, exam information · verified Oct 2026
- training.linuxfoundation.org — Eligibility, fees, test dates, time limit · verified Oct 2026