Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

IBM C1000-150 Exam - Topic 7 Question 14 Discussion

Which statement is true concerning secrets on Kubernetes master (API server)?
B) Extra steps are needed to encrypt secrets at rest.
A) Secrets are by default encrypted at rest.
C) Secrets only transit through Kubernetes master; encryption at rest is out of its responsibilities.
D) Secrets are self-secured needing no encryption at rest.

IBM C1000-150 Exam - Topic 7 Question 14 Discussion

Actual exam question for IBM's C1000-150 exam
Question #: 14
Topic #: 7
[All C1000-150 Questions]

Which statement is true concerning secrets on Kubernetes master (API server)?

Show Suggested Answer Hide Answer
Suggested Answer: B

Secrets on Kubernetes master (API server) are not encrypted by default at rest, extra steps are needed to encrypt them. Kubernetes does not automatically encrypt secrets at rest, it is the responsibility of the user to ensure that the secrets are encrypted. There are several ways to encrypt secrets at rest, such as using Kubernetes native encryption, third-party encryption tools or using a cloud provider's encryption services.


by Sharee at May 30, 2023, 01:12 AM

Limited Time Offer

25%

Off

Get Premium C1000-150 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Melissia
10 months ago
D is just wrong. Secrets need proper handling, not just left unsecured.
upvoted 0 times
...
Wilbert
10 months ago
C is misleading; encryption at rest is definitely a responsibility of the system.
upvoted 0 times
...
Howard
10 months ago
Wait, are secrets really not encrypted by default? That’s surprising!
upvoted 0 times
...
Dana
10 months ago
Totally agree with B! Encryption isn’t automatic.
upvoted 0 times
...
Golda
11 months ago
B is the correct answer. You need to set up encryption manually.
upvoted 0 times
...
Nikita
11 months ago
I’m pretty certain that secrets do need extra steps for encryption at rest, so I would go with B. It seems to match what we practiced.
upvoted 0 times
...
Catherin
11 months ago
I vaguely recall that secrets are sensitive data, but I’m confused about whether they are encrypted by default or not. Could it be A?
upvoted 0 times
...
Herminia
11 months ago
I feel like we discussed something about encryption at rest needing extra configuration. That makes me lean towards B as well.
upvoted 0 times
...
Rashad
11 months ago
I think I remember that secrets aren't encrypted by default, so maybe it's B? But I'm not completely sure.
upvoted 0 times
...
Catherin
11 months ago
Okay, the key here is that we need to get notified when the temperature goes above 4 degrees Celsius. So I'm thinking option A or C would be the way to go - pin the report or a card visual and set an alert on that.
upvoted 0 times
...
Della
11 months ago
I'm a little confused on this one. I know the federal agencies play different roles in privacy, but I'm not sure which one specifically doesn't have regulatory authority. I'll have to think about this a bit more.
upvoted 0 times
...
Dottie
11 months ago
This question seems straightforward, but I want to make sure I understand the key functions of a Session Border Controller before selecting my answers.
upvoted 0 times
...

Save Cancel