Discuss Linux Foundation CKS Exam Topic 1 Question 4

SIMULATION

Secrets stored in the etcd is not secure at rest, you can use the etcdctl command utility to find the secret value

for e.g:-

ETCDCTL_API=3 etcdctl get /registry/secrets/default/cks-secret --cacert="ca.crt" --cert="server.crt" --key="server.key"

Output

Using the Encryption Configuration, Create the manifest, which secures the resource secrets using the provider AES-CBC and identity, to encrypt the secret-data at rest and ensure all secrets are encrypted with the new configuration.

ASend us the Feedback on it.

Suggested Answer: A

Get Premium CKS Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Deandrea 1 year ago

I’m not sure if that’s the best method, though.

Arleen 1 year ago

AES-CBC is a solid choice for encryption!

Jettie 1 year ago

Wait, you can just get secrets like that?

Alfred 1 year ago

Totally agree, secrets should be encrypted.

Stevie 1 year ago

That's a major security risk!

Eden 1 year ago

I think we practiced a similar scenario where we had to encrypt secrets. I remember the command for etcdctl, but I'm not confident about the manifest structure for the encryption configuration.

Nydia 1 year ago

I feel a bit lost on how to create the manifest. I know it involves specifying the encryption provider, but I can't remember the exact parameters we need to include.

Hillary 1 year ago

This reminds me of a practice question we did on securing secrets in etcd. I think we used AES-CBC in that example too, but I can't recall all the details.

Meghann 1 year ago

I remember we discussed how etcd stores secrets and the importance of encrypting them at rest, but I'm not entirely sure about the exact manifest syntax for the encryption configuration.

Carmela 1 year ago

I'm feeling pretty confident about this one. The endpoint and parameters indicate that this is retrieving email-related data, so the correct answer is likely Option D, which mentions the device group name and type for email.

Lawrence 1 year ago

This is a tricky one. I'm not entirely sure about the differences between the options, especially between B and C. I'll need to think through the pros and cons of each approach to determine the most cost-effective solution that also maintains high availability.

Bernadine 1 year ago

Okay, I think I have a strategy here. I'll focus on the disk space issue and evaluate which actions could actually free up space.

Linux Foundation CKS Exam - Topic 1 Question 4 Discussion