CKAD Practice Question: Application Environment, Configuration and Security
Which THREE of the following are valid fields in a PodSecurityContext?
⚠ Common exam trap
CNCF often tests the distinction between PodSecurityContext and container SecurityContext, trapping candidates who assume all security-related fields (like capabilities or allowPrivilegeEscalation) are valid at the pod level when they are actually container-specific.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
fsGroup
`fsGroup` is a valid field in a PodSecurityContext. It specifies the supplemental group ID applied to all containers in the pod when accessing volumes, ensuring proper file ownership and permissions for shared storage.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
fsGroup
Why this is correct
Valid at pod level; sets group ownership of volumes.
- ✗
capabilities
Why it's wrong here
This is a container-level SecurityContext field, not pod-level.
- ✓
seccompProfile
Why this is correct
Valid at pod level (alpha in earlier versions, GA in v1.27+).
- ✓
runAsNonRoot
Why this is correct
Valid at pod level; applies to all containers.
- ✗
allowPrivilegeEscalation
Why it's wrong here
This is a container-level SecurityContext field, not pod-level.
Go deeper
Related to this question
About these practice questions
One of 160 original CKAD practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CKAD practice question is part of Courseiva's free CNCF certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CKAD exam.