hardMultiple SelectObjective-mapped
200-901 Practice Question: Which TWO of the following are valid security…
Which TWO of the following are valid security considerations when deploying an application to a Kubernetes cluster managed by Cisco Intersight? (Choose two.)
⚠ Common exam trap
Cisco often tests the misconception that ConfigMaps are suitable for secrets (they are not) and that disabling RBAC simplifies management (it actually creates a massive security hole), while candidates may overlook that Network Policies require a compatible CNI plugin to be effective.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Define Network Policies to isolate pods and control traffic flow.
Network Policies in Kubernetes act as a firewall at the pod level, using label selectors and namespace selectors to control ingress and egress traffic. In a Cisco Intersight-managed cluster, defining these policies is a critical security consideration to enforce micro-segmentation and prevent lateral movement of threats. Option E is correct because Pod Security Policies (PSPs) are a cluster-level resource that control security-sensitive aspects of pod specification, such as preventing privileged containers, which is a key security best practice in Kubernetes.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Store secrets in ConfigMaps for easy retrieval.
Why it's wrong here
Secrets should be stored in Kubernetes Secrets, not ConfigMaps, and encrypted at rest.
- ✓
Define Network Policies to isolate pods and control traffic flow.
Why this is correct
Network policies enforce micro-segmentation and limit lateral movement.
- ✗
Disable RBAC to simplify management and reduce overhead.
Why it's wrong here
Disabling RBAC removes access control, making the cluster vulnerable to unauthorized actions.
- ✗
Use default service accounts for all pods to avoid misconfiguration.
Why it's wrong here
Default service accounts often have excessive permissions; custom accounts with least privilege are recommended.
- ✓
Implement Pod Security Policies to restrict privileged containers.
Why this is correct
PSPs prevent containers from running with unnecessary privileges.
Go deeper
Related to this question
About these practice questions
This 200-901 question is part of Courseiva's 989-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-901 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-901 exam.