EKS and ECS Security Quiz

Quiz covering Compute Security

Questions in this quiz

A preview of the 5 questions covered. Start the quiz above to answer them, check your score, and read the explanations.

1. 1

   Which AWS feature should be used to assign specific IAM permissions to an Amazon EKS pod rather than assigning them to the underlying EC2 worker nodes?

2. 2

   When deploying an Amazon ECS service, which 'Launch Type' offers the most isolation between containers by providing a dedicated kernel for each task?

3. 3

   You want to ensure that your EKS cluster nodes are not accessible from the public internet. Which configuration is the most secure practice?

4. 4

   Which mechanism is recommended to securely inject sensitive information, such as database passwords, into an ECS container at runtime without hardcoding them in the task definition?

5. 5

   In an EKS environment, you have a requirement to audit all API calls made to the Kubernetes control plane. Which feature must be enabled to achieve this?