KCSA Compliance And Security Frameworks Practice Question
Which open-source auditing tool provides compliance scores and checks against Kubernetes security frameworks such as NSA-CISA and CIS?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Kubescape
Datree or Kubescape are prominent tools for compliance scoring. Kubescape specifically evaluates Kubernetes clusters against multiple security frameworks including CIS and NSA-CISA.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Kube-dns
Why it's wrong here
Kube-dns is a legacy core cluster DNS component.
- ✗
Metric-server
Why it's wrong here
Metrics-server collects resource metrics for HPA.
- ✗
Cilium
Why it's wrong here
Cilium is an eBPF-based networking and security CNI.
- ✓
Kubescape
Why this is correct
Kubescape is an open-source Kubernetes security platform for risk and compliance analysis.
About these practice questions
Courseiva writes every KCSA question from scratch — 319 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official CNCF / Linux Foundation exam blueprint
This KCSA practice question is part of Courseiva's free CNCF / Linux Foundation certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the KCSA exam.