Match each Kubernetes security concept to its definition.
Drag a concept onto its matching description — or click a concept then click the description.
Identity for processes running in a pod
Role-based access control to authorize API requests
Specifies how groups of pods are allowed to communicate
Deprecated but formerly controlled security-sensitive pod settings
Stores sensitive data like passwords and tokens
Answer choices
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
RBAC: Controls access to the Kubernetes API based on roles and permissions.
RBAC and NetworkPolicy are fundamental security mechanisms. ServiceAccount provides identity. The distractors confuse RBAC with secrets management and NetworkPolicy with user access control.
Answer analysis
For each option: why learners choose it and why it is or isn't the right answer here.
RBAC: Controls access to the Kubernetes API based on roles and permissions.
Why this is correct
RBAC (Role-Based Access Control) is the standard for managing API access by assigning roles to users or service accounts.
NetworkPolicy: Defines rules for ingress and egress traffic between pods.
Why this is correct
Network policies are firewall rules that control pod-to-pod and pod-to-external traffic at the network layer.
ServiceAccount: Provides an identity for processes running in a pod.
Why this is correct
Service accounts are used by pods to authenticate to the Kubernetes API server.
RBAC: Manages secrets and encryption at rest.
Why it's wrong here
Incorrect — managing secrets and encryption is handled by Secrets and encryption configuration, not RBAC.
NetworkPolicy: Controls which users can access the cluster.
Why it's wrong here
Incorrect — user access control is handled by authentication and RBAC, not network policies.
Quick reference
| Model | Acronym | Who Controls Access? | Best For |
|---|---|---|---|
| Discretionary Access Control | DAC | Resource owner | Small teams, file shares |
| Mandatory Access Control | MAC | System / security labels | Classified govt / military |
| Role-Based Access Control | RBAC | Administrator (via roles) | Enterprise environments |
| Attribute-Based Access Control | ABAC | Policy engine (user + resource attributes) | Fine-grained, dynamic policies |
| Rule-Based Access Control | RuBAC | System rules / ACLs | Firewall rules, network ACLs |
Go deeper
About these practice questions
Courseiva writes every KCNA question from scratch — 833 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This KCNA practice question is part of Courseiva's free CNCF certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the KCNA exam.