KCSA Kubernetes Security Fundamentals Practice Question
Under the Pod Security Standards, a developer attempts to deploy a pod with 'privileged: true' in a namespace labeled with 'pod-security.kubernetes.io/enforce=baseline'. What will happen?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The admission controller will reject the pod creation request with an error.
The 'baseline' profile prohibits privileged containers. The admission controller will reject the pod creation request.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The admission controller will reject the pod creation request with an error.
Why this is correct
Privileged mode violates the baseline policy, causing the admission controller to deny the request.
- ✗
The pod will run in a restricted sandbox environment automatically.
Why it's wrong here
The pod will be blocked entirely rather than silently sandboxed.
- ✗
The pod will be created successfully, but a warning will be logged in the audit log.
Why it's wrong here
Enforce mode actively rejects non-compliant pods rather than just warning.
- ✗
The kubelet will automatically strip the 'privileged: true' setting and run the pod safely.
Why it's wrong here
Kubelet does not mutate incoming specs to fix security violations; admission controllers or mutators handle rejection or mutation.
About these practice questions
Courseiva writes every KCSA question from scratch — 320 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official CNCF / Linux Foundation exam blueprint
This KCSA practice question is part of Courseiva's free CNCF / Linux Foundation certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the KCSA exam.