Question 1
Domain 6: Security, RBAC & ConfigurationWhich Kubernetes setting prevents a Pod from automatically mounting the ServiceAccount token?
Correct answer: A
Explanation
Kubernetes mounts a ServiceAccount token into a Pod by default so the Pod can authenticate to the API server. Setting "automountServiceAccountToken: false" in the Pod spec disables that automatic mount, preventing the token from being injected.
Why each option is right or wrong
A. Set automountServiceAccountToken: false in the Pod spec
Under the Pod API, the `automountServiceAccountToken` field controls whether Kubernetes injects the ServiceAccount token volume into the Pod; when it is set to `false`, the token is not mounted automatically. This is the documented PodSpec behavior in the Kubernetes API, and it applies at Pod creation time, so the setting must be placed in the Pod spec rather than on the container.
B. Set hostNetwork: false in the Pod spec
C. Set serviceAccountName: default in the Pod spec
D. Set enableServiceLinks: false in the Pod spec