Study. uk . com
  1. Home
  2. All questions
  3. Question 23

CKA study material · question 23 of 1000

What is the security benefit of making a binding's roleRef immutable?

  1. It prevents two bindings granting the same role
  2. Someone can be allowed to manage the subject list without being able to grant a stronger role
  3. It stops aggregated ClusterRoles from being overwritten
  4. It removes the need for the escalate verb
Show the answer

Answer: B. Someone can be allowed to manage the subject list without being able to grant a stronger role

Update permission on a binding can be granted safely because the role it points at cannot be swapped.

Source: Using RBAC Authorization (Kubernetes) — ClusterRoleBinding example

Challenge yourself on this topic → Study as cards