Study. uk . com
  1. Home
  2. All questions
  3. Question 96

CKA study material · question 96 of 1000

Which two statements about how Secrets are stored are correct? Choose two.

  1. They are encrypted with a per-namespace key by default
  2. They are stored unencrypted in etcd by default
  3. They are held only in the kubelet's memory
  4. Anyone with access to etcd can read or modify them
Show the answer

Answer: B. They are stored unencrypted in etcd by default
D. Anyone with access to etcd can read or modify them

Secrets sit unencrypted in etcd until encryption at rest is enabled, so etcd access exposes them.

Source: Secrets (Kubernetes) — Secrets

Challenge yourself on this topic → Study as cards