Linux Foundation KCSA Exam - Topic 3 Question 11 Discussion

Actual exam question for Linux Foundation's KCSA exam

Question #: 11
Topic #: 3

[All KCSA Questions]

A container running in a Kubernetes cluster has permission to modify host processes on the underlying node.

What combination of privileges and capabilities is most likely to have led to this privilege escalation?

AThere is no combination of privileges and capabilities that permits this.

BhostPID and SYS_PTRACE

ChostPath and AUDIT_WRITE

DhostNetwork and NET_RAW

Show Suggested Answer

Suggested Answer: A

by Brendan at Mar 03, 2026, 02:48 PM

Limited Time Offer

25%

Off

Get Premium KCSA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Veda

11 hours ago

I'm not entirely sure, but I think SYS_PTRACE is related to debugging and could allow a container to manipulate host processes if combined with hostPID.

upvoted 0 times

...

Talia

5 days ago

I remember reading that hostPID allows containers to see and interact with processes on the host, which could lead to privilege escalation.

upvoted 0 times

...