KCSA Kubernetes Threat Model Practice Question
What is the security risk of configuring `privileged: true` in a container's SecurityContext?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
It disables container isolation, granting full access to host devices and kernel capabilities
A privileged container disables all kernel namespace isolation and security confinement, granting the container full access to all devices and kernel capabilities of the host.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
It restricts the container from writing to any attached volume.
Why it's wrong here
Privileged mode actually grants unrestricted filesystem and device access, rather than restricting writes.
- ✓
It disables container isolation, granting full access to host devices and kernel capabilities
Why this is correct
Privileged containers share almost all host capabilities and device access, rendering container isolation effectively nonexistent.
- ✗
It forces the API server to reject all incoming TLS client requests.
Why it's wrong here
Container privileges do not affect API server TLS client authentication.
- ✗
It prevents the application from reading its own environment variables.
Why it's wrong here
Environment variables remain fully accessible inside privileged containers.
About these practice questions
This KCSA question is part of Courseiva's 320-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official CNCF / Linux Foundation exam blueprint
This KCSA practice question is part of Courseiva's free CNCF / Linux Foundation certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the KCSA exam.