KCSA Kubernetes Cluster Component Security Practice Question

A security auditor discovers that anonymous authentication is accidentally enabled on the Kubernetes API server, allowing unauthenticated read access to cluster health endpoints. Which API server flag must be modified to disable anonymous requests?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

--anonymous-auth=false

Setting --anonymous-auth=false explicitly disables requests that are not rejected by other authenticators from being treated as anonymous.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
--secure-port=0
Why it's wrong here
Disabling the secure port shuts down the entire API server safely, not just anonymous requests.
✗
--authorization-mode=AlwaysAllow
Why it's wrong here
This configures the authorizer, not authentication or anonymous access.
✓
--anonymous-auth=false
Why this is correct
This is the correct flag to disable anonymous requests on the kube-apiserver.
✗
--disable-anonymous=true
Why it's wrong here
This flag does not exist in the Kubernetes API server configuration.

About these practice questions

This KCSA question is part of Courseiva's 320-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

Written and reviewed by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

Last reviewed August 2026 · checked against the official CNCF / Linux Foundation exam blueprint

Ready to practise?

Start a scored session and see where you stand.

Start practice session

Scored practice sessions

Work through a scored set and see where your weak spots actually are.

KCSA Practice Questions 1 — 50 Questions→KCSA Practice Questions 2 — 50 Questions→KCSA Practice Test 2 — 25 Questions→

Practice by domain

Each of these maps to a scored section of the exam blueprint.

Kubernetes Cluster Component Security Kubernetes Threat Model Overview OF Cloud Native Security Kubernetes Security Fundamentals

Practice by scenario

Practise one question format at a time: exhibits, multi-select, drag-and-drop, troubleshooting.

Browse scenarios

Practice by topic

Target a specific weak area. Each page focuses on one exam topic with questions, explanations and a concept guide.

Kubernetes Cluster Component Security practice questions KCSA troubleshooting practice questions KCSA fundamentals practice questions

Continue studying

Exam domains All CNCF / Linux Foundation practice questions KCSA practice test

This KCSA practice question is part of Courseiva's free CNCF / Linux Foundation certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the KCSA exam.