Discuss IBM C1000-150 Exam Topic 7 Question 14

Which statement is true concerning secrets on Kubernetes master (API server)?

ASecrets are by default encrypted at rest.

BExtra steps are needed to encrypt secrets at rest.

CSecrets only transit through Kubernetes master; encryption at rest is out of its responsibilities.

DSecrets are self-secured needing no encryption at rest.

Suggested Answer: B

Secrets on Kubernetes master (API server) are not encrypted by default at rest, extra steps are needed to encrypt them. Kubernetes does not automatically encrypt secrets at rest, it is the responsibility of the user to ensure that the secrets are encrypted. There are several ways to encrypt secrets at rest, such as using Kubernetes native encryption, third-party encryption tools or using a cloud provider's encryption services.

Get Premium C1000-150 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Melissia 11 months ago

D is just wrong. Secrets need proper handling, not just left unsecured.

Wilbert 12 months ago

C is misleading; encryption at rest is definitely a responsibility of the system.

Howard 12 months ago

Wait, are secrets really not encrypted by default? That’s surprising!

Dana 12 months ago

Totally agree with B! Encryption isn’t automatic.

Golda 1 year ago

B is the correct answer. You need to set up encryption manually.

Nikita 1 year ago

I’m pretty certain that secrets do need extra steps for encryption at rest, so I would go with B. It seems to match what we practiced.

Catherin 1 year ago

I vaguely recall that secrets are sensitive data, but I’m confused about whether they are encrypted by default or not. Could it be A?

Herminia 1 year ago

I feel like we discussed something about encryption at rest needing extra configuration. That makes me lean towards B as well.

Rashad 1 year ago

I think I remember that secrets aren't encrypted by default, so maybe it's B? But I'm not completely sure.

Catherin 1 year ago

Okay, the key here is that we need to get notified when the temperature goes above 4 degrees Celsius. So I'm thinking option A or C would be the way to go - pin the report or a card visual and set an alert on that.

Della 1 year ago

I'm a little confused on this one. I know the federal agencies play different roles in privacy, but I'm not sure which one specifically doesn't have regulatory authority. I'll have to think about this a bit more.

Dottie 1 year ago

This question seems straightforward, but I want to make sure I understand the key functions of a Session Border Controller before selecting my answers.

IBM C1000-150 Exam - Topic 7 Question 14 Discussion