Kubernetes and Cloud Native Associate (KCNA) — Question 131

Which statement about Secrets is correct?

Answer options

• A. A Secret is part of a Pod specification.
• B. Secrets data is encrypted with the cluster private key by default.
• C. Secrets data is base64 encoded and stored unencrypted by default
• D. A Secret can only be used for confidential data

Correct answer: C

Explanation

The correct answer is C because Secrets are indeed base64 encoded and stored unencrypted by default, making them accessible in plain text form. Option A is incorrect as a Secret is not inherently part of a Pod specification, while option B is misleading since Secrets are not encrypted by default. Option D is false because Secrets can be used for various types of data, not just confidential information.