CKS_FINALE

ANSWER.md

@@ -0,0 +1,20 @@
+# CKS-020 — Protect super-admin credentials
+
+Domain: **2.3 Restrict Kubernetes API access**  
+Time: **1 minute** · Reward: **100 XP + topic mastery**
+
+## Task
+
+Secure `/etc/kubernetes/super-admin.conf`, currently `0644 root:root`:
+
+1. Back it up to `/root/super-admin.conf.backup`.
+2. Set the live file to mode `0600`.
+3. Verify the live file with `stat -c '%a %U:%G'`.
+
+## Section B — scored answer
+
+```bash
+# Your three commands
+```
+
+Say **Grade CKS-020** when saved.