Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Linux Foundation KCSA Exam - Topic 5 Question 17 Discussion

A container running in a Kubernetes cluster has permission to modify host processes on the underlying node.What combination of privileges and capabilities is most likely to have led to this privilege escalation?
A) There is no combination of privileges and capabilities that permits this.
B) hostPID and SYS_PTRACE
C) hostPath and AUDIT_WRITE
D) hostNetwork and NET_RAW

Linux Foundation KCSA Exam - Topic 5 Question 17 Discussion

Actual exam question for Linux Foundation's KCSA exam
Question #: 17
Topic #: 5
[All KCSA Questions]

A container running in a Kubernetes cluster has permission to modify host processes on the underlying node.

What combination of privileges and capabilities is most likely to have led to this privilege escalation?

Show Suggested Answer Hide Answer
Suggested Answer: A

by Katie at Jun 17, 2026, 03:38 PM

Limited Time Offer

25%

Off

Get Premium KCSA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Shala
2 days ago
C is a stretch, not sure it fits the scenario.
upvoted 0 times
...
Iluminada
8 days ago
Wow, I didn't know hostPID could do that!
upvoted 0 times
...
Jutta
13 days ago
I disagree, I think it's A. No way to modify host processes!
upvoted 0 times
...
King
18 days ago
B) hostPID and SYS_PTRACE seems right.
upvoted 0 times
...
Caitlin
23 days ago
I feel like hostNetwork and NET_RAW are more about network capabilities. They don’t seem to relate to modifying host processes.
upvoted 0 times
...
Jade
28 days ago
I don’t recall hostPath being related to modifying processes directly. I thought it was more about file system access.
upvoted 0 times
...
Sophia
1 month ago
I’m not entirely sure, but I think SYS_PTRACE might be involved in modifying processes. It sounds familiar from our practice questions.
upvoted 0 times
...
Mee
1 month ago
I remember reading that hostPID allows a container to see and interact with processes on the host, which could lead to privilege escalation.
upvoted 0 times
...

Save Cancel