Prepare for the ITGSS Certified DevOps Engineer Test. Review with flashcards and multiple-choice questions, each featuring hints and explanations. Achieve exam success with our tools!

Each practice test/flash card set has 50 randomly selected questions from a bank of over 500. You'll get a new set of questions each time!

Practice this question and more.


What is a recommended security practice for Kubernetes Secrets?

  1. Disable API access

  2. Enable encryption at rest

  3. Use clear text storage

  4. Allow public access

The correct answer is: Enable encryption at rest

Enabling encryption at rest is a recommended security practice for managing Kubernetes Secrets. When you store sensitive information like passwords, OAuth tokens, and SSH keys in Kubernetes, it's crucial to protect this data from unauthorized access. Encryption at rest ensures that the stored secrets are encrypted on disk, making them unreadable without the proper decryption keys. This adds a vital layer of security, protecting sensitive data even if someone were to gain unauthorized access to the storage layer. By encrypting secrets, Kubernetes safeguards against potential data breaches and unauthorized access to sensitive information, thereby adhering to best practices for data protection and compliance with security policies. This practice is particularly important in cloud environments or shared infrastructures where the risk of exposure is heightened.