Correct Answer: ServiceAccount
A ServiceAccount provides an identity for processes that run in a Pod. When you access the cluster (for example, using kubectl), you are authenticated by the apiserver as a particu...
Correct Answer
ServiceAccount
Why This Answer Is Correct
A ServiceAccount provides an identity for processes that run in a Pod. When you access the cluster (for example, using kubectl), you are authenticated by the apiserver as a particular User Account (currently usually admin). Processes in containers inside pods can also contact the apiserver.
This question evaluates your knowledge of Kubernetes Security — a core concept tested in cloud certification exams. Understanding Kubernetes Security is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
To securely store and inject passwords, API keys, or certificates into a Pod, which Kubernetes resource should you use?
How can you restrict Pod communication so that 'frontend' pods can only talk to 'backend' pods on port 8080?
You are defining a ClusterRole in Kubernetes to grant read access to secrets. However, you want to ensure this role only applies to a specific Namespace rather than the entire cluster. How should you bind this role to a ServiceAccount?
A pod needs to run with root privileges to perform system-level diagnostics. To prevent this pod from running on other nodes with unrestricted capabilities, you want to enforce that all pods in a namespace do not run as root. Which resource should you implement?