IBM C1000-150 Exam - Topic 7 Question 14 Discussion

Actual exam question for IBM's C1000-150 exam

Question #: 14
Topic #: 7

[All C1000-150 Questions]

Which statement is true concerning secrets on Kubernetes master (API server)?

ASecrets are by default encrypted at rest.

BExtra steps are needed to encrypt secrets at rest.

CSecrets only transit through Kubernetes master; encryption at rest is out of its responsibilities.

DSecrets are self-secured needing no encryption at rest.

Show Suggested Answer

Suggested Answer: B

Secrets on Kubernetes master (API server) are not encrypted by default at rest, extra steps are needed to encrypt them. Kubernetes does not automatically encrypt secrets at rest, it is the responsibility of the user to ensure that the secrets are encrypted. There are several ways to encrypt secrets at rest, such as using Kubernetes native encryption, third-party encryption tools or using a cloud provider's encryption services.

by Sharee at May 30, 2023, 01:12 AM

Limited Time Offer

25%

Off

Get Premium C1000-150 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Melissia

4 months ago

D is just wrong. Secrets need proper handling, not just left unsecured.

upvoted 0 times

...

Wilbert

4 months ago

C is misleading; encryption at rest is definitely a responsibility of the system.

upvoted 0 times

...

Howard

5 months ago

Wait, are secrets really not encrypted by default? That’s surprising!

upvoted 0 times

...

Dana

5 months ago

Totally agree with B! Encryption isn’t automatic.

upvoted 0 times

...

Golda

5 months ago

B is the correct answer. You need to set up encryption manually.

upvoted 0 times

...

Nikita

5 months ago

I’m pretty certain that secrets do need extra steps for encryption at rest, so I would go with B. It seems to match what we practiced.

upvoted 0 times

...

Catherin

5 months ago

I vaguely recall that secrets are sensitive data, but I’m confused about whether they are encrypted by default or not. Could it be A?

upvoted 0 times

...

Herminia

5 months ago

I feel like we discussed something about encryption at rest needing extra configuration. That makes me lean towards B as well.

upvoted 0 times

...

Rashad

5 months ago

I think I remember that secrets aren't encrypted by default, so maybe it's B? But I'm not completely sure.

upvoted 0 times

...

Catherin

5 months ago

Okay, the key here is that we need to get notified when the temperature goes above 4 degrees Celsius. So I'm thinking option A or C would be the way to go - pin the report or a card visual and set an alert on that.

upvoted 0 times

...

Della

5 months ago

I'm a little confused on this one. I know the federal agencies play different roles in privacy, but I'm not sure which one specifically doesn't have regulatory authority. I'll have to think about this a bit more.

upvoted 0 times

...

Dottie

5 months ago

This question seems straightforward, but I want to make sure I understand the key functions of a Session Border Controller before selecting my answers.

upvoted 0 times

...