MENU
Use the kubesec docker images to scan the given YAML manifest, edit and apply the advised changes, and passed with a score of 4 points.
kubesec-test.yaml
apiVersion: v1
kind: Pod
metadata:
name: kubesec-demo
spec:
containers:
- name: kubesec-demo
image: gcr.io/google-samples/node-hello:1.0
securityContext:
readOnlyRootFilesystem: true
Suggested Answer: A
Get Premium CKS Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
13 comments · newest first
WI
Wilda
1 year ago
Surprised it scored so high with just that change!
RA
Raylene
1 year ago
Totally agree with the changes suggested by kubesec!
RO
Rose
1 year ago
Wait, you can use readOnlyRootFilesystem? I thought that was risky!
IL
Ilona
1 year ago
Nice! I got a 3, need to tweak my YAML.
PE
Pedro
1 year ago
Just ran the scan, got a score of 4!
EL
Elza
1 year ago
I feel like I should definitely set `readOnlyRootFilesystem` to true, but I wonder if there are other security settings we might need to adjust as well.
VA
Val
1 year ago
The hint about using `docker run` is helpful, but I’m a bit confused about how to interpret the scan results correctly.
CL
Clarence
1 year ago
I think I’ve seen a similar question in our mock exams, but I can’t recall all the specific security settings we need to apply.
HU
Huey
1 year ago
I remember we practiced using kubesec to scan YAML files, but I’m not sure if I set the right security context last time.
RO
Rodolfo
1 year ago
Okay, I've got a good handle on the capabilities and limitations of Platform Events. I'm confident I can select the three most relevant considerations for this scenario.
SU
Sunshine
1 year ago
Okay, let's think this through. The camera is recognized, but the data won't download. That points to a potential connectivity or compatibility issue. I'd start by checking the drivers and any other system configurations.
GE
Georgene
1 year ago
Okay, I've got a good handle on this. The key benefits are simplified disaster recovery, better performance, and common storage/replication with application data. I'll make sure to select those three options.
OC
Octavio
1 year ago
I'm leaning toward option D because it includes everything mentioned. It feels comprehensive, but I'm not 100% sure.