☁️ Free practice test question from: KCNA (KCNA)

User Accounts:

• Intended for humans/people

• Not managed as Kubernetes API objects

• Authenticated via external systems (certificates, OIDC, etc.)

• Often have cluster-wide permissions

• Used for administrative tasks and human-initiated operations

Service Accounts:

• Intended for processes running inside pods

• Created and managed by Kubernetes API

• Authenticated via mounted tokens or projected volumes

• Typically namespace-scoped by default

• Used for machine-to-machine authentication within the cluster