Linux Foundation Exam CKS Topic 1 Question 60 Discussion

Actual exam question for Linux Foundation's CKS exam

Question #: 60
Topic #: 1

[All CKS Questions]

Context

Your organization's security policy includes:

ServiceAccounts must not automount API credentials

ServiceAccount names must end in "-sa"

The Pod specified in the manifest file /home/candidate/KSCH00301 /pod-m

nifest.yaml fails to schedule because of an incorrectly specified ServiceAccount.

Complete the following tasks:

Task

1. Create a new ServiceAccount named frontend-sa in the existing namespace q

a. Ensure the ServiceAccount does not automount API credentials.

2. Using the manifest file at /home/candidate/KSCH00301 /pod-manifest.yaml, create the Pod.

3. Finally, clean up any unused ServiceAccounts in namespace qa.

AExplanation:

Show Suggested Answer

Suggested Answer: A

by Annamaria at Jul 15, 2024, 11:54 PM

Limited Time Offer

25%

Off

Get Premium CKS Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Jeffrey

8 hours ago

Alright, let's do this! First, create the frontend-sa ServiceAccount, then use the manifest file to create the Pod. And don't forget to clean up any unused ServiceAccounts in the qa namespace. Easy peasy, let's get this done!

upvoted 0 times

...

Lenny

14 days ago

Wait, so we need to create a new ServiceAccount without automounting API credentials? That's pretty straightforward. Oh, and the name needs to end in -sa too. Gotta love those security policies, am I right?

upvoted 0 times

...