Winter Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: pass65

Discussions
  1. Home
  2. Discussions
  3. Linux Foundation
  4. Kubernetes Security Specialist
  5. CKS Discussions
  6. CKS Exam Topic 1 Question 3 Discussion
 Linux Foundation Discussions
Exam CKS All Questions
Exam CKS All Questions

View all questions & answers for the CKS exam

Go to Exam

Linux Foundation Kubernetes Security Specialist CKS Question # 3 Topic 1 Discussion

CKS Exam Topic 1 Question 3 Discussion:
Question #: 3
Topic #: 1

You can switch the cluster/configuration context using the following command:

[desk@cli] $ kubectl config use-context dev 

Context:

A CIS Benchmark tool was run against the kubeadm created cluster and found multiple issues that must be addressed.

Task:

Fix all issues via configuration and restart the affected components to ensure the new settings take effect.

Fix all of the following violations that were found against the API server:

1.2.7 authorization-mode argument is not set to AlwaysAllow    FAIL

1.2.8 authorization-mode argument includes Node   FAIL

1.2.7 authorization-mode argument includes RBAC    FAIL

Fix all of the following violations that were found against the Kubelet:

4.2.1 Ensure that the anonymous-auth argument is set to false FAIL

4.2.2 authorization-mode argument is not set to AlwaysAllow  FAIL (Use Webhook autumn/authz where possible)

Fix all of the following violations that were found against etcd:

2.2 Ensure that the client-cert-auth argument is set to true
Get Premium CKS Questions
Actual exam question for Linux Foundation CKS exam by Kairo17261 at Feb 17, 2025, 8:27:08 PM

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.

Submit