CKS Certified Kubernetes Security Specialist (CKS) Exam

Loading demo links...

Showing 10–10 of 10 questions

Question 10

Graphical user interface, application Description automatically generated

Context

AppArmor is enabled on the cluster's worker node. An AppArmor profile is prepared, but not enforced yet.

Graphical user interface, text Description automatically generated

Task

On the cluster's worker node, enforce the prepared AppArmor profile located at /etc/apparmor.d/nginx_apparmor.

Edit the prepared manifest file located at /home/candidate/KSSH00401/nginx-pod.yaml to apply the AppArmor profile.

Finally, apply the manifest file and create the Pod specified in it.

Answer is in the explanation below.