# CKS-020 — Protect super-admin credentials

Domain: **2.3 Restrict Kubernetes API access**  
Time: **1 minute** · Reward: **100 XP + topic mastery**

## Task

Secure `/etc/kubernetes/super-admin.conf`, currently `0644 root:root`:

1. Back it up to `/root/super-admin.conf.backup`.
2. Set the live file to mode `0600`.
3. Verify the live file with `stat -c '%a %U:%G'`.

## Section B — scored answer

```bash
# Your three commands
```

Say **Grade CKS-020** when saved.