1. What is Container image scanning ? Junior A. mesh sidecars enforcing mutual TLS between services for encrypted, authenticated traffic B. cluster webhook that validates or mutates resource requests before they are persisted C. analyzing image layers for known-vulnerable packages before deployment D. exposure of credentials placed in environment variables that leak via logs or process listings
2. Which term means: "analyzing image layers for known-vulnerable packages before deployment"? Junior A. Runtime security (eBPF) B. Network policy C. Container image scanning D. Pod Security Standards
3. Which statement is correct? Junior A. Container image scanning — analyzing image layers for known-vulnerable packages before deployment B. Container image scanning — Kubernetes resource controlling allowed pod-to-pod and pod-to-external traffic C. Container image scanning — Kubernetes policy levels (Privileged, Baseline, Restricted) constraining pod security settings D. Container image scanning — container running with host-level capabilities that can break isolation if compromised
4. What is Image signing ? Junior A. cryptographically signing container images so only verified images are deployed B. mesh sidecars enforcing mutual TLS between services for encrypted, authenticated traffic C. using a small or distroless base image to shrink the attack surface of a container D. Kubernetes policy levels (Privileged, Baseline, Restricted) constraining pod security settings
5. Which term means: "cryptographically signing container images so only verified images are deployed"? Junior A. Image signing B. Container breakout C. Runtime security (eBPF) D. Service mesh mTLS
6. Which statement is correct? Junior A. Image signing — escaping a container's isolation to execute code on the underlying host B. Image signing — mesh sidecars enforcing mutual TLS between services for encrypted, authenticated traffic C. Image signing — cryptographically signing container images so only verified images are deployed D. Image signing — Kubernetes policy levels (Privileged, Baseline, Restricted) constraining pod security settings
7. What is Minimal base image ? Junior A. using a small or distroless base image to shrink the attack surface of a container B. cryptographically signing container images so only verified images are deployed C. role-based authorization governing which subjects may perform actions on cluster resources D. cluster webhook that validates or mutates resource requests before they are persisted
8. Which term means: "using a small or distroless base image to shrink the attack surface of a container"? Junior A. Service mesh mTLS B. Minimal base image C. Pod Security Standards D. Image signing
9. Which statement is correct? Junior A. Minimal base image — container running with host-level capabilities that can break isolation if compromised B. Minimal base image — Kubernetes policy levels (Privileged, Baseline, Restricted) constraining pod security settings C. Minimal base image — using a small or distroless base image to shrink the attack surface of a container D. Minimal base image — cryptographically signing container images so only verified images are deployed
10. What is Secrets in env vars risk ? Junior A. role-based authorization governing which subjects may perform actions on cluster resources B. Kubernetes resource controlling allowed pod-to-pod and pod-to-external traffic C. exposure of credentials placed in environment variables that leak via logs or process listings D. analyzing image layers for known-vulnerable packages before deployment
11. Which term means: "exposure of credentials placed in environment variables that leak via logs or process listings"? Junior A. Admission controller B. Runtime security (eBPF) C. Secrets in env vars risk D. Image signing
12. Which statement is correct? Junior A. Secrets in env vars risk — analyzing image layers for known-vulnerable packages before deployment B. Secrets in env vars risk — Kubernetes resource controlling allowed pod-to-pod and pod-to-external traffic C. Secrets in env vars risk — exposure of credentials placed in environment variables that leak via logs or process listings D. Secrets in env vars risk — cryptographically signing container images so only verified images are deployed
13. What is Privileged container ? Mid A. container running with host-level capabilities that can break isolation if compromised B. detecting malicious container behavior at runtime via kernel-level eBPF instrumentation C. exposure of credentials placed in environment variables that leak via logs or process listings D. escaping a container's isolation to execute code on the underlying host
14. Which term means: "container running with host-level capabilities that can break isolation if compromised"? Mid A. Pod Security Standards B. Privileged container C. Service mesh mTLS D. Network policy
15. Which statement is correct? Mid A. Privileged container — mesh sidecars enforcing mutual TLS between services for encrypted, authenticated traffic B. Privileged container — escaping a container's isolation to execute code on the underlying host C. Privileged container — exposure of credentials placed in environment variables that leak via logs or process listings D. Privileged container — container running with host-level capabilities that can break isolation if compromised
16. What is Pod Security Standards ? Mid A. escaping a container's isolation to execute code on the underlying host B. analyzing image layers for known-vulnerable packages before deployment C. Kubernetes policy levels (Privileged, Baseline, Restricted) constraining pod security settings D. Kubernetes resource controlling allowed pod-to-pod and pod-to-external traffic
17. Which term means: "Kubernetes policy levels (Privileged, Baseline, Restricted) constraining pod security settings"? Mid A. Service mesh mTLS B. Container breakout C. Kubernetes RBAC D. Pod Security Standards
18. Which statement is correct? Mid A. Pod Security Standards — exposure of credentials placed in environment variables that leak via logs or process listings B. Pod Security Standards — container running with host-level capabilities that can break isolation if compromised C. Pod Security Standards — Kubernetes policy levels (Privileged, Baseline, Restricted) constraining pod security settings D. Pod Security Standards — escaping a container's isolation to execute code on the underlying host
19. What is Network policy ? Mid A. detecting malicious container behavior at runtime via kernel-level eBPF instrumentation B. analyzing image layers for known-vulnerable packages before deployment C. cryptographically signing container images so only verified images are deployed D. Kubernetes resource controlling allowed pod-to-pod and pod-to-external traffic
20. Which term means: "Kubernetes resource controlling allowed pod-to-pod and pod-to-external traffic"? Mid A. Network policy B. Minimal base image C. Admission controller D. Service mesh mTLS
21. Which statement is correct? Mid A. Network policy — Kubernetes resource controlling allowed pod-to-pod and pod-to-external traffic B. Network policy — container running with host-level capabilities that can break isolation if compromised C. Network policy — cryptographically signing container images so only verified images are deployed D. Network policy — Kubernetes policy levels (Privileged, Baseline, Restricted) constraining pod security settings
22. What is Kubernetes RBAC ? Mid A. Kubernetes policy levels (Privileged, Baseline, Restricted) constraining pod security settings B. container running with host-level capabilities that can break isolation if compromised C. cryptographically signing container images so only verified images are deployed D. role-based authorization governing which subjects may perform actions on cluster resources
23. Which term means: "role-based authorization governing which subjects may perform actions on cluster resources"? Mid A. Image signing B. Privileged container C. Network policy D. Kubernetes RBAC
24. Which statement is correct? Mid A. Kubernetes RBAC — cryptographically signing container images so only verified images are deployed B. Kubernetes RBAC — role-based authorization governing which subjects may perform actions on cluster resources C. Kubernetes RBAC — Kubernetes policy levels (Privileged, Baseline, Restricted) constraining pod security settings D. Kubernetes RBAC — escaping a container's isolation to execute code on the underlying host
25. What is Container breakout ? Senior A. escaping a container's isolation to execute code on the underlying host B. container running with host-level capabilities that can break isolation if compromised C. cluster webhook that validates or mutates resource requests before they are persisted D. using a small or distroless base image to shrink the attack surface of a container
26. Which term means: "escaping a container's isolation to execute code on the underlying host"? Senior A. Admission controller B. Runtime security (eBPF) C. Secrets in env vars risk D. Container breakout
27. Which statement is correct? Senior A. Container breakout — mesh sidecars enforcing mutual TLS between services for encrypted, authenticated traffic B. Container breakout — Kubernetes resource controlling allowed pod-to-pod and pod-to-external traffic C. Container breakout — escaping a container's isolation to execute code on the underlying host D. Container breakout — role-based authorization governing which subjects may perform actions on cluster resources
28. What is Admission controller ? Senior A. cluster webhook that validates or mutates resource requests before they are persisted B. using a small or distroless base image to shrink the attack surface of a container C. role-based authorization governing which subjects may perform actions on cluster resources D. Kubernetes resource controlling allowed pod-to-pod and pod-to-external traffic
29. Which term means: "cluster webhook that validates or mutates resource requests before they are persisted"? Senior A. Runtime security (eBPF) B. Minimal base image C. Service mesh mTLS D. Admission controller
30. Which statement is correct? Senior A. Admission controller — role-based authorization governing which subjects may perform actions on cluster resources B. Admission controller — escaping a container's isolation to execute code on the underlying host C. Admission controller — cryptographically signing container images so only verified images are deployed D. Admission controller — cluster webhook that validates or mutates resource requests before they are persisted
Showing 30 of 36 Container & K8s Security questions — the full set, with answers, explanations and an AI tutor on every question, is inside.