KCSA Overview OF Cloud Native Security Practice Question
An organization wants to prevent supply chain attacks where compromised base images are pulled from public registries. Which control directly addresses this risk in a cloud native environment?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Restricting container image pulls to approved, scanned internal registries using admission controllers
Enforcing trusted registry sources and using verified base images mitigates container supply chain risks.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Implementing Kubernetes Horizontal Pod Autoscalers
Why it's wrong here
HPAs scale pods based on CPU/memory usage, not image security.
- ✗
Disabling all outbound internet access from cluster worker nodes
Why it's wrong here
While good practice, it does not specifically validate container image provenance.
- ✗
Enabling audit logging on the Kubernetes API server
Why it's wrong here
Audit logs record events but do not restrict image sources.
- ✓
Restricting container image pulls to approved, scanned internal registries using admission controllers
Why this is correct
Ensuring images come only from approved, scanned registries prevents untrusted public image usage.
About these practice questions
This KCSA question is part of Courseiva's 320-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official CNCF / Linux Foundation exam blueprint
This KCSA practice question is part of Courseiva's free CNCF / Linux Foundation certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the KCSA exam.