Practice CKS System Hardening questions with full explanations on every answer.
Start practicing
System Hardening — choose a session length
Free · No account required
Click any question to see the full explanation and answer options, or start a focused practice session above.
A pod is running with AppArmor enabled using a profile named 'k8s-apparmor-profile'. You want to verify that the profile is loaded and set to enforce mode. Which command should you run on the node?
2You are tasked with reducing the attack surface on a Kubernetes node. Which of the following actions is LEAST effective for hardening the node itself?
3Which of the following host access settings should be disabled to reduce the attack surface of a container?
4Which THREE of the following are best practices for reducing the attack surface of Kubernetes nodes?
5A security team wants to ensure that all containers in a pod run with only the minimum required Linux capabilities. Which of the following approaches is BEST?
6Which TWO of the following are valid ways to reduce the attack surface of a Kubernetes node? (Select 2)
7Which TWO of the following are valid methods to apply a seccomp profile to a pod in Kubernetes?
8Which TWO of the following are valid AppArmor profile modes?
9An administrator wants to enforce a custom AppArmor profile named 'k8s-apparmor-example' on a pod. The profile has been loaded on the node. Which annotation should be added to the pod's metadata to apply this profile?
10Which TWO of the following are valid AppArmor profile modes? (Select two.)
11Which TWO AppArmor modes are available? (Select 2)
The System Hardening domain covers the key concepts tested in this area of the CKS exam blueprint published by CNCF. Courseiva provides free domain-focused practice, mock exams, missed-question review, and readiness tracking across all CKS domains — no account required.
The Courseiva CKS question bank contains 11 questions in the System Hardening domain, covering the 10% of the exam attributed to this domain in the official CNCF blueprint. Click any question to see the full explanation and answer breakdown.
Start with a 10-question focused session to identify your baseline accuracy in this domain. Read every explanation — even for questions you answer correctly — to understand the reasoning. Once you score consistently above 80%, move to a 20–30 question session to confirm depth before moving to the next domain.
Yes — the session launcher on this page draws questions exclusively from the System Hardening domain. Choose 10, 20, 30, or 50 questions for a focused session, or click individual questions to review them one by one.
Save your results, see per-domain analytics, and get readiness scores — free, for every certification.
Sign Up FreeFree forever · Every certification included