To securely store and inject passwords, API keys, or certificates into a Pod, which Kubernetes resource should you use?

Which Kubernetes concept acts as an identity for processes that run in a Pod, giving them access to the Kubernetes API?

How can you restrict Pod communication so that 'frontend' pods can only talk to 'backend' pods on port 8080?

Which of the following best describes the primary advantage of using Kubernetes Security in a production environment (Scenario 1)?

Which of the following best describes the primary advantage of using Kubernetes Security in a production environment (Scenario 2)?