cks-final/ANSWER.md

CKS-020 — Protect super-admin credentials

Domain: 2.3 Restrict Kubernetes API access
Time: 1 minute · Reward: 100 XP + topic mastery

Task

Secure /etc/kubernetes/super-admin.conf, currently 0644 root:root:

1. Back it up to /root/super-admin.conf.backup.
2. Set the live file to mode 0600.
3. Verify the live file with stat -c '%a %U:%G'.

Section B — scored answer

# Your three commands

Say Grade CKS-020 when saved.