According to NSA/CISA, what are the three most common sources of Kubernetes cluster compromise?

Question

Accepted Answer

Supply chain risks, malicious threat actors, and insider threats — the guide's three vectors — Supply chain, malicious actors, and insiders are the three vectors NSA hardening mitigates. DDoS/weak-passwords/TLS are generic perimeter issues, not the cluster threat model; misconfigured Ingress/dashboards are symptoms of those vectors, not roots; drift/bloat/noisy-neighbor are ops-hygiene concerns, not security compromise sources.

Answer

Denial-of-service floods, weak passwords, and outdated TLS — generic perimeter weaknesses

Answer

Misconfigured Ingress, exposed dashboards, and default namespaces — common cluster mistakes

Answer

Container drift, image bloat, and noisy-neighbor contention — operational hygiene problems

According to NSA/CISA, what are the three most common sources of Kubernetes cluster compromise?

Why this is the answer

More Kubernetes Security & Cluster Hardening flashcards