Kubernetes Container Orchestration Security and RBAC 2

Question 1

Which Kubernetes object binds a ClusterRole to a user within a specific namespace?

Accepted Answer

RoleBinding

Answer

A RoleBinding grants the permissions defined in a ClusterRole or Role to a user within a specific namespace.

Question 2

What does the 'principle of least privilege' mean in Kubernetes RBAC?

Accepted Answer

Grant only the minimum permissions required to perform a task

Answer

Least privilege means granting only the permissions necessary for a user or service account to perform its intended function.

Question 3

Which field in a Pod spec allows you to run a container as a non-root user?

Accepted Answer

securityContext.runAsNonRoot

Answer

Setting securityContext.runAsNonRoot: true prevents the container from running as the root user (UID 0).

Question 4

What is the purpose of a Kubernetes NetworkPolicy?

Accepted Answer

Control ingress and egress traffic between pods

Answer

NetworkPolicy resources define rules that control which pods can communicate with each other and with external endpoints.

Question 5

Which command shows the RBAC permissions of a specific service account?

Accepted Answer

kubectl auth can-i --list --as=system:serviceaccount::

Answer

kubectl auth can-i --list with the --as flag impersonates the service account and lists all allowed verbs and resources.

Kubernetes Container Orchestration Practice Test