Câu 20: KCSA: Kubernetes and Cloud Native Security Associate

In a multi-tenant Kubernetes environment where each team has distinct access requirements and workloads, which combination of strategies would enhance client security and maintain workload isolation?

1. A. Rely solely on basic authentication with a shared password across all teams, utilize node taints and tolerations, and turn off logging to optimize performance
2. B. Utilize bearer tokens with a third party identity service, employ network policies for Pod-level isolation, and leverage Audit Logs to track client interactions. — đáp án hiện tại
3. C. Use service account tokens for all external and internal clients, store client credentials in ConfigMaps, and rely on namespace quotas for workload isolation.
4. D. Enable anonymous authentication, enforce mutual TLS (mTLS), and segregate workloads using pod affinities.