KCSA Platform Security Practice Question
Why is running containers as the root user discouraged in Kubernetes platform security best practices?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
It increases the impact of potential container breakout or compromise by granting root privileges inside the container
Running as root inside a container means that if an attacker achieves container escape or remote code execution, they may have elevated privileges on the host or inside the container namespace.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
It prevents the kubelet from starting the pod
Why it's wrong here
Kubernetes allows running as root by default unless restricted by PodSecurity admission policies.
- ✗
It disables network policy enforcement
Why it's wrong here
Network policies are enforced by the CNI plugin regardless of container user IDs.
- ✗
It stops container image vulnerability scanning
Why it's wrong here
Image scanning occurs independently of the runtime user ID.
- ✓
It increases the impact of potential container breakout or compromise by granting root privileges inside the container
Why this is correct
Running as non-root limits the potential damage an attacker can do if they compromise the container application.
About these practice questions
One of 319 original KCSA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official CNCF / Linux Foundation exam blueprint
This KCSA practice question is part of Courseiva's free CNCF / Linux Foundation certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the KCSA exam.