Free Access to LinuxFoundation.KCSA.v2026-03-21.q21 with Valid Practice Test (Page 5)

Request Exam Contact

Home
View All Exams
New QA's
Upload

PRACTICE EXAMS:

Oracle
Fortinet
Juniper
Microsoft
Cisco
Citrix
CompTIA
VMware
ISC
SAP
EMC
PMI
HP
Salesforce
Other

Oracle
Fortinet
Juniper
Microsoft
Cisco
Citrix
CompTIA
VMware
ISC
SAP
EMC
PMI
HP
Salesforce

Home
Linux Foundation Certification
KCSA Exam
LinuxFoundation.KCSA.v2026-03-21.q21 Dumps

«
1
2
3
4
5
6
»

Question 16

Which information does a user need to verify a signed container image?

A.The image's SHA-256 hash and the private key of the signing authority.
B.The image's digital signature and the private key of the signing authority.
C.The image's SHA-256 hash and the public key of the signing authority.
D.The image's digital signature and the public key of the signing authority.

Correct Answer: D

* Container image signing (e.g., withcosign, Notary v2) uses asymmetric cryptography.
* Verification process:
* Retrieve theimage's digital signature.
* Validate the signature with thepublic keyof the signer.
* Exact extract (Sigstore Cosign Docs):
* "Verification of an image requires the signature and the signer's public key. The signature proves authenticity and integrity."
* Why others are wrong:
* A & B: The private key is only used by the signer, never shared.
* C: The hash alone cannot prove authenticity without the digital signature.
References:
Sigstore Cosign Docs: https://docs.sigstore.dev/cosign/overview

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 17

Which of the following statements best describes the role of the Scheduler in Kubernetes?

A.The Scheduler is responsible for monitoring and managing the health of the Kubernetes cluster.
B.The Scheduler is responsible for managing the deployment and scaling of applications in the Kubernetes cluster.
C.The Scheduler is responsible for ensuring the security of the Kubernetes cluster and its components.
D.The Scheduler is responsible for assigning Pods to nodes based on resource availability and other constraints.

Correct Answer: D

* TheKubernetes Schedulerassigns Pods to nodes based on:
* Resource requests & availability (CPU, memory, GPU, etc.)
* Constraints (affinity, taints, tolerations, topology, policies)
* Exact extract (Kubernetes Docs - Scheduler):
* "The scheduler is a control plane process that assigns Pods to Nodes. Scheduling decisions take into account resource requirements, affinity/anti-affinity, constraints, and policies."
* Other options clarified:
* A: Monitoring cluster health is theController Manager's/kubelet's job.
* B: Security is enforced throughRBAC, admission controllers, PSP/PSA, not the scheduler.
* C: Deployment scaling is handled by theController Manager(Deployment/ReplicaSet controller).
References:
Kubernetes Docs - Scheduler: https://kubernetes.io/docs/concepts/scheduling-eviction/kube-scheduler/

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 18

What is Grafana?

A.A cloud-native distributed tracing system for monitoring microservices architectures.
B.A container orchestration platform for managing and scaling applications.
C.A platform for monitoring and visualizing time-series data.
D.A cloud-native security tool for scanning and detecting vulnerabilities in Kubernetes clusters.

Correct Answer: C

* Grafana:An open-source analytics and visualization platform widely used with Prometheus, Loki, etc.
* Exact extract (Grafana Docs):"Grafana is the open-source analytics and monitoring solution for every database. It allows you to query, visualize, alert on, and understand your metrics no matter where they are stored."
* A is wrong:That describesJaeger(distributed tracing).
* B is wrong:That'sKubernetesitself.
* D is wrong:That'sTrivy/Aqua/Prismatype tools.
References:
Grafana Docs: https://grafana.com/docs/grafana/latest/

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 19

In a cluster that contains Nodes withmultiple container runtimesinstalled, how can a Pod be configured to be created on a specific runtime?

A.By using a command-line flag when creating the Pod.
B.By modifying the Docker daemon configuration.
C.By setting the container runtime as an environment variable in the Pod.
D.By specifying the container runtime in the Pod's YAML file.

Correct Answer: D

* Kubernetes supportsmultiple container runtimeson a node via theRuntimeClassresource.
* To select a runtime, you specify the runtimeClassName field in thePod's YAML manifest. Example:
* apiVersion: v1
* kind: Pod
* metadata:
* name: example
* spec:
* runtimeClassName: gvisor
* containers:
* - name: app
* image: nginx
* Incorrect options:
* (A) You cannot specify container runtime through a kubectl command-line flag.
* (B) Modifying the Docker daemon config does not direct Kubernetes Pods to a runtime.
* (C) Environment variables inside a Pod spec do not control container runtimes.
References:
Kubernetes Documentation - RuntimeClass
CNCF Security Whitepaper - Workload isolation via different runtimes (e.g., gVisor, Kata) for enhanced security.

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 20

Why mightNetworkPolicyresources have no effect in a Kubernetes cluster?

A.NetworkPolicy resources are only enforced if the Kubernetes scheduler supports them.
B.NetworkPolicy resources are only enforced if the networking plugin supports them.
C.NetworkPolicy resources are only enforced for unprivileged Pods.
D.NetworkPolicy resources are only enforced if the user has the right RBAC permissions.

Correct Answer: B

* NetworkPolicies define how Pods can communicate with each other and external endpoints.
* However, Kubernetes itselfdoes not enforce NetworkPolicy. Enforcement depends on theCNI plugin used (e.g., Calico, Cilium, Kube-Router, Weave Net).
* If a cluster is using a network plugin that does not support NetworkPolicies, then creating NetworkPolicy objects hasno effect.
References:
Kubernetes Documentation - Network Policies
CNCF Security Whitepaper - Platform security section: notes that security enforcement relies on CNI capabilities.

Comment: *

Name: *

Email: *

Verification: *

insert code

«
1
2
3
4
5
6
»

[×]

Download PDF File

Enter your email address to download LinuxFoundation.KCSA.v2026-03-21.q21 Dumps

Email:

Our website provides the Largest and the most Latest vendors Certification Exam materials around the world.

Using dumps we provide to Pass the Exam, we has the Valid Dumps with passing guranteed just which you need.

DMCA
About
Contact Us
Privacy Policy
Terms & Conditions

©2026 FreeQAs

www.freeqas.com materials do not contain actual questions and answers from Cisco's certification exams.

Web Analytics Made Easy - Statcounter