Kubernetes - RBAC and Security
Why does the 'restricted' Pod Security Standard forbid running containers as root user by default?
Why does the 'restricted' Pod Security Standard forbid running containers as root user by default?
hard📝 Conceptual Q10 of 15
Step-by-Step Solution
Solution:
Step 1: Understand security risks of root user containers
Containers running as root have elevated privileges, increasing risk of attacks.Step 2: Explain why restricted forbids root
Restricted policy forbids root to reduce privilege escalation and improve security.Final Answer:
Running as root increases the risk of privilege escalation attacks -> Option DQuick Check:
Restricted forbids root to prevent privilege escalation [OK]
Quick Trick: Root user containers risk privilege escalation, so restricted forbids them [OK]
Common Mistakes:
- Thinking root containers use more CPU
- Believing root containers lack network access
- Assuming root is only for privileged pods
Master "RBAC and Security" in Kubernetes
Want More Practice?
15+ quiz questions · All difficulty levels · Free
Free Signup - Practice All QuestionsMore Kubernetes Quizzes