Courseiva
← CKS
Full test
mediumMultiple ChoiceObjective-mapped

CKS Practice Question: Disable anonymous authentication to the…

An administrator wants to disable anonymous authentication to the Kubernetes API server. Which flag should be added to the kube-apiserver configuration?

⚠ Common exam trap

Many candidates confuse authentication flags with authorization modes or admission plugins, and may invent non-existent flags like `--disable-anonymous` or assume `DenyAnonymous` is a valid admission plugin name.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

--anonymous-auth=false

The `--anonymous-auth=false` flag explicitly disables anonymous authentication to the Kubernetes API server. When set to false, requests without valid authentication credentials are rejected with a 401 Unauthorized error, preventing unauthenticated access. This is the standard Kubernetes mechanism to disable anonymous authentication as documented in the kube-apiserver reference.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✗

    --disable-anonymous

    Why it's wrong here

    This flag does not exist; the correct flag is --anonymous-auth=false.

  • ✗

    --authorization-mode=RBAC

    Why it's wrong here

    This enables RBAC but does not disable anonymous auth.

  • ✓

    --anonymous-auth=false

    Why this is correct

    This flag disables anonymous authentication.

  • ✗

    --enable-admission-plugins=DenyAnonymous

    Why it's wrong here

    There is no such admission plugin named DenyAnonymous.

About these practice questions

One of 114 original CKS practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This CKS practice question is part of Courseiva's free CNCF certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CKS exam.