Pure Storage Portworx-Enterprise-Professional Exam - Topic 1 Question 3 Discussion

Actual exam question for Pure Storage's Portworx-Enterprise-Professional exam

Question #: 3
Topic #: 1

[All Portworx-Enterprise-Professional Questions]

Portworx uses secrets to authenticate Kubernetes to the Portworx system.

When using the shared authentication method, where is that secret stored?

AIn the namespace that runs the application that needs to provision the storage resources

BIn the 'default' namespace

CIn the same namespace as the Portworx installation

Show Suggested Answer

Suggested Answer: A

Comprehensive and Detailed Explanation From Exact Extract:

When using shared authentication in Portworx, the Kubernetes secret that contains the authentication token or credentials is stored in the same namespace where the application requesting storage resides. This placement ensures that the application pods have access to the secret needed to authenticate to Portworx for volume provisioning and management. It enables a security boundary aligned with Kubernetes namespaces, restricting credentials to the scope of the application. Storing the secret in the default namespace or the Portworx installation namespace would be less secure or less flexible in multi-tenant clusters. Portworx authentication documentation highlights this design for efficient, secure access management in Kubernetes environmentsPure Storage Portworx Security Guidesource.

by Helene at Aug 12, 2025, 03:59 AM

Limited Time Offer

25%

Off

Get Premium Portworx-Enterprise-Professional Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Delisa

2 months ago

Nope, it's definitely not in the application namespace.

upvoted 0 times

...

Kristeen

2 months ago

I thought it was in the 'default' namespace?

upvoted 0 times

...

Brittani

3 months ago

Totally agree, that's how it works!

upvoted 0 times

...

Alfred

3 months ago

Surprised to learn it's tied to the Portworx namespace!

upvoted 0 times

...

Ruthann

3 months ago

It's stored in the same namespace as the Portworx installation.

upvoted 0 times

...

Francene

3 months ago

I believe it's in the namespace that runs the application needing the storage, but I could be mixing it up with another topic.

upvoted 0 times

...

Sharika

4 months ago

I’m a bit confused; I thought secrets could be in the 'default' namespace, but that might just be for other types of resources.

upvoted 0 times

...

Hildegarde

4 months ago

I remember practicing a question about Kubernetes secrets, and I feel like it was related to the application's namespace.

upvoted 0 times

...

Leonida

4 months ago

I think the secret is stored in the same namespace as the Portworx installation, but I'm not entirely sure.

upvoted 0 times

...

Micheal

4 months ago

This is a tricky one. I'm not entirely sure where the secret is stored, but I'm leaning towards option B since the 'default' namespace is often used for system-level resources. I'll have to double-check my understanding on this.

upvoted 0 times

...

Tamera

4 months ago

Okay, let me see. The question says the secret is used to authenticate Kubernetes to Portworx, so it makes sense that it would be stored in the namespace that runs the application that needs to provision the storage resources. I'll go with option A.

upvoted 0 times

...

Tamie

4 months ago

Hmm, I'm a bit confused about this one. I know Portworx uses secrets, but I'm not sure where they're stored. I'll have to think this through carefully.

upvoted 0 times

...

Della

5 months ago

I'm pretty sure the secret is stored in the same namespace as the Portworx installation, so I'll go with option C.

upvoted 0 times

...