Kubernetes and Cloud Native Associate (KCNA) Practice Questions At the fictional company Nexoryx Hardware Platforms, a Kubernetes Deployment must run only on Nodes with specific hardware capabilities identified by Node labels.
Kubernetes and Cloud Native Associate (KCNA) Practice Questions
0% Completed
Premium Set: 1 [ + Detailed Explanations] Free Preview
At the fictional company Lunatrix-Forge Software, the delivery pipeline automatically promotes successful changes through testing and into production.
Reading
At the fictional company Aetherix Cluster Networking, which statement correctly describes the Kubernetes network model, assuming there is no intentional network segmentation such as a NetworkPolicy that restricts the traffic?
Reading
At the fictional company Veltrixa Release Engineering, which Kubernetes Deployment strategy supports zero-downtime application updates.
Reading
At the fictional company Cerynova Troubleshooting Labs, a Pod is repeatedly entering CrashLoopBackOff.
Reading
At the fictional company Cinderlyn Configuration Labs, which Kubernetes resource among the following supports the immutable: true field to prevent changes to its stored configuration data?
Reading
At the fictional company Ceryntra Open Source Labs, which choice most closely matches the common conflict-resolution and decision-making approach used by CNCF-hosted open-source projects under open governance?
Reading
At the fictional company Nexalume Developer Platforms, in a modern DevOps and platform-engineering organization.
Reading
At the fictional company Quenoryx Scheduling Systems, which field in a Pod specification, including the Pod template of a Deployment, constrains Pods to Nodes that have specific labels?
Reading
At the fictional company Qubrixa Release Systems, what is the default update strategy for a Kubernetes Deployment when spec.strategy.type is not explicitly set?
Reading
At the fictional company Aerovanta Microservice Engineering, CNCF's cloud-native definition emphasizes that loosely coupled systems should have which of the following qualities?
Reading
At the fictional company Asterivex Scheduling Systems, in a Kubernetes cluster, what is the primary role of the Kubernetes scheduler?
Reading
At the fictional company Vireloryx Image Security, what is an important consideration when choosing a base image for a production container used in Kubernetes?
Reading
At the fictional company Arqovista-9 Technologies, a user has configured a Kubernetes CronJob to run once every hour.
Reading
At the fictional company Quoravex Access Control, in Kubernetes, what is the primary function of a RoleBinding?
Reading
At the fictional company Vantoryx Service Engineering, can a single Kubernetes Service expose multiple ports?
Reading
At the fictional company Velunexa-41 Systems, which Kubernetes API object is the recommended way to run a scalable, stateless application on a cluster?
Reading
At the fictional company Ceryntra Runtime Platforms, which Node component is responsible for actually executing and managing the containers that make up Kubernetes workloads after kubelet requests runtime operations?
Reading
At the fictional company Auralexa Gateway Platforms, what is the purpose of Gateway API in Kubernetes?
Reading
At the fictional company Qorvexa Batch Systems, which Kubernetes workload resource is designed to run a recurring workload according to a time-based schedule?
Reading
At the fictional company Luminara Cluster Operations, which kubectl subcommand displays detailed information about a live Kubernetes resource, including related information such as events where applicable?
Reading
At the fictional company Nimbryx-Aster Labs, what is the purpose of the kubelet component within a Kubernetes cluster?
Reading
At the fictional company Lumora Network Engineering, Kubernetes IPv4/IPv6 dual-stack networking provides which capability?
Reading
At the fictional company Lumivanta Service Platforms, what Kubernetes abstraction allows a group of Pods to be exposed through a stable network access mechanism inside a cluster?
Reading
At the fictional company Orivexa Node Reliability, for an ordinary Pod that does not explicitly override these tolerations.
Reading
At the fictional company Qoralyx Identity Platforms, which ServiceAccount does Kubernetes automatically assign to a Pod when spec.serviceAccountName is not specified?
Reading
At the fictional company Cyralith-27 Cloud, what is the default value of the kube-apiserver authorization-mode setting when authorization-config is not used?
Reading
At the fictional company Vantoryx Node Services, what is the main purpose of a Kubernetes DaemonSet?
Reading
At the fictional company Qantrivex-Delta Labs, the platform team is reviewing low-level container runtimes.
Reading
At the fictional company Nexora Container Platforms, what Kubernetes resource packages one or more tightly coupled containers together as the smallest deployable and schedulable unit?
Reading
At the fictional company Norvexa Service Fabric, which type of Kubernetes Service normally requires you to create and manage the corresponding EndpointSlice objects manually when you want to define its network backends yourself?
Reading
At the fictional company Torvane-Pulse Data, an organization must process a large burst of data every Monday on a cloud-based Kubernetes cluster.
Reading
At the fictional company Veltrion Cloud Systems, which Kubernetes node agent runs on each Node and ensures that the containers specified for Pods assigned to that Node are running and healthy?
Reading
At the fictional company Lumetria Reliability Works, which engineering persona is normally most closely associated with defining, practicing, testing, and participating in an incident-management process for production-service reliability?
Reading
At the fictional company Quoralis Platform Engineering, which command retrieves Kubernetes documentation and field definitions for an API resource directly from the schema information available to kubectl?
Reading
At the fictional company Prismora-62 Security, encryption at rest has not been explicitly configured for the Kubernetes API server's data store.
Reading
At the fictional company Veloryn Namespace Platforms, a Kubernetes administrator wants to limit the total memory usage permitted for all Pods in a specific namespace to 4Gi.
Reading
At the fictional company Calystria Pod Engineering, which two categories of resources can containers in the same Kubernetes Pod share?
Reading
At the fictional company Nexovanta-18 Platforms, what function does kube-proxy provide to a Kubernetes cluster?
Reading
At the fictional company Asterlynx Control Systems, what Kubernetes control-plane component exposes the programmatic interface used to create, manage, and interact with Kubernetes API objects?
Reading
At the fictional company Lumirex Cluster Operations, which option contains only examples of resources that Kubernetes garbage-collection mechanisms can clean up?
Reading
At the fictional company Avenqora Reliability Systems, under an SRE operating model, which team is typically responsible for the production reliability and ongoing operational maintenance of workloads running across different platforms?
Reading
At the fictional company Quenvara Software Engineering, what does Continuous Integration mean?
Reading
At the fictional company Zephoryn Container Platforms, why do administrators use a container orchestration tool such as Kubernetes?
Reading
At the fictional company Veloryx Application Delivery, which command correctly creates a Kubernetes Deployment named nginx that uses the nginx image and starts with 2 replicas?
Reading
At the fictional company Velunara Microservices, which of the following is a lightweight service mesh that can manage service-to-service traffic, apply authorization policies, and collect telemetry without requiring changes to application code?
Reading
At the fictional company Nexoriva Helm Engineering, when modifying an existing Helm release to apply new configuration values, which approach is the best practice among the following options?
Reading
At the fictional company Zenvoryx Large-Scale Platforms, which statement matches the current Kubernetes design guidance for supported large-cluster size?
Reading
At the fictional company Nexavora Cloud Applications, which option best describes a cloud-native application?
Reading
At the fictional company Nexalith Certificate Systems, how does cert-manager integrate with Kubernetes resources to provide TLS certificates for an application?
Reading
At the fictional company Vexalume-83 Networks, what is a Kubernetes Service with no cluster virtual IP address called?
Reading
Premium Set: 2 [ + Detailed Explanations] Free Preview
At the fictional company Zorvanta-Cloudworks, in which computing model do application developers generally avoid directly managing server capacity, operating systems, infrastructure scaling, and much of the underlying fault-tolerance machinery?
Reading
At the fictional company Helioxen Open Source Labs, which responsibility is most characteristic of an open source project's governance model or governing body?
Reading
At the fictional company Quoralyx GitOps Platforms, a platform engineer wants a new microservice to be automatically deployed to every cluster registered in Argo CD.
Reading
At the fictional company Asterovex Observability Labs, what are the three traditional pillars of observability used to understand the behavior and health of cloud-native systems?
Reading
At the fictional company Velatrix-Logics, which kubectl command displays a Pod's logs continuously in real time as new log lines are produced?
Reading
At the fictional company Ceryntra Service Platforms, which Kubernetes abstraction defines a logical set of backend endpoints, usually Pods, and a policy by which clients can access them?
Reading
At the fictional company Nexorion-Dataforge, which Kubernetes workload resource requires a governing headless Service to provide the network identity of its Pods?
Reading
At the fictional company Velqoria Identity Platforms, which standard can Kubernetes use to authenticate users with externally issued JSON Web Tokens (JWTs)?
Reading
At the fictional company Pentarix-Nova Technologies, in a cloud-native engineering context, what does the abbreviation IaC stand for?
Reading
At the fictional company Quoravex GitOps Engineering, what is Flux constructed with?
Reading
At the fictional company Auralexa API Engineering, under Kubernetes API-version compatibility rules, if an API version is named v2beta3, which statement best describes what the beta designation means for schema or semantic compatibility?
Reading
At the fictional company Velatrix Cloud Architecture, in a cloud-native environment, how do operating-system-level containers and virtual machines differ in their basic resource-isolation model?
Reading
At the fictional company Cerynova Hybrid Infrastructure, which of the following best defines a hybrid cloud architecture?
Reading
At the fictional company Cerynthia-Edgeworks, which lightweight Kubernetes distribution is specifically designed for resource-constrained, edge, IoT, embedded, and similar environments?
Reading
At the fictional company Nexoriva Application Delivery, which of the following is a feature Kubernetes provides as a container orchestration platform?
Reading
At the fictional company Auralith Container Platforms, which of the following is a core set of tasks performed by a container orchestration platform?
Reading
At the fictional company Brinovar Runtime Systems, how do you execute a command inside a running container of a Kubernetes Pod?
Reading
At the fictional company Nexovanta Node Operations, which kubectl command can a cluster administrator use to temporarily prevent ordinary new Pods from being scheduled onto a Node for maintenance?
Reading
At the fictional company Zephyra Application Delivery, how can you deploy a Kubernetes workload using Kubernetes' standard command-line tooling without requiring an additional packaging system?
Reading
At the fictional company Virelora Application Platforms, which Kubernetes workload resource is recommended for managing a stateless application whose Pod replicas are interchangeable?
Reading
At the fictional company Auralynx Observability Systems, in the common instrumentation model used to capture end-to-end distributed traces as requests move across cloud-native services, at which layer is tracing primarily implemented?
Reading
At the fictional company Orventis Kubernetes Academy, which command provides schema documentation specifically for the replicas field inside the spec of a Deployment?
Reading
At the fictional company Asterqube-17 Systems, which of the following characteristics is associated with container orchestration?
Reading
At the fictional company Halcyvora-55 Analytics, which named Kubernetes SIG Autoscaling implementation adds or removes Nodes from preconfigured node groups so cluster capacity can adapt to workload demand?
Reading
At the fictional company Orivexa-Quartz Software, a generally available (GA) command-line interface element in a user-facing Kubernetes component such as kubectl has been officially deprecated.
Reading
At the fictional company Etrivox Consensus Systems, which pair most directly represents the infrastructure factors that constrain etcd consensus performance and commit latency?
Reading
At the fictional company Orivexa Delivery Engineering, which option best describes the meaning of “continuous” in mature CI/CD practices?
Reading
At the fictional company Quoralyx-88 Platforms, what is Helm?
Reading
At the fictional company Prismatic Shield Networks, what role does a Kubernetes NetworkPolicy play in Pod network isolation?
Reading
At the fictional company Qantrivex Runtime Engineering, which statement about container runtimes in Kubernetes is correct?
Reading
At the fictional company Cerynova Storage Engineering, which statement is true about the Container Storage Interface (CSI) in Kubernetes?
Reading
At the fictional company Zenvora Security Engineering, which of the following is a recommended Kubernetes Pod hardening practice and is required by the current Pod Security Standards Restricted profile for Linux workloads?
Reading
At the fictional company Lumorix Workload Operations, a Pod has been accepted by Kubernetes and scheduled, but one or more container images are still being downloaded on the selected Node. Which Pod phase applies?
Reading
At the fictional company Solvexa Service Platforms, what is a Kubernetes Service?
Reading
At the fictional company Velunara Network Systems, what open source edge and service proxy is designed for cloud-native applications?
Reading
At the fictional company Nexoria Autoscaling Systems, which mechanism is specifically designed to automatically adjust the CPU and memory resources assigned to Pods of an application workload?
Reading
At the fictional company Lumivanta GitOps Platforms, which cloud-native tools keep Kubernetes clusters synchronized with declarative configuration sources such as Git repositories and can automate configuration updates when desired state changes?
Reading
At the fictional company Axionerva-Policy Labs, which statement is correct concerning Open Policy Agent (OPA) in a Kubernetes environment?
Reading
At the fictional company Quoravex Storage Engineering, how does dynamic storage provisioning work in Kubernetes?
Reading
At the fictional company Prismalyn Metrics Systems, which Kubernetes API group exposes NodeMetrics and PodMetrics collected by Metrics Server for resource usage and autoscaling?
Reading
At the fictional company Nexalume Reliability Engineering, what does a Kubernetes livenessProbe help detect?
Reading
At the fictional company Ceryvex Service Mesh Systems, lightweight network proxies such as Envoy are part of which logical plane in a service mesh?
Reading
At the fictional company Nexoryx Hardware Platforms, a Kubernetes Deployment must run only on Nodes with specific hardware capabilities identified by Node labels.
Reading
At the fictional company Cinderlyn Identity Systems, why are ServiceAccounts used in Kubernetes when assigning Role-Based Access Control (RBAC) permissions to Pods?
Reading
At the fictional company Nexoralis Security Engineering, what is the difference between a Kubernetes securityContext and a Pod Security Standards profile?
Reading
At the fictional company Vantoryn Storage Engineering, what best describes ephemeral storage in Kubernetes?
Reading
At the fictional company Nemorix GitOps Labs, once a GitOps workflow is live and declarative desired state stored in version control is the authoritative source for Kubernetes configuration, which of the following practices is an antipattern?
Reading
At the fictional company Zephyrix Container Standards, what is the reference implementation of the Open Container Initiative (OCI) Runtime Specification?
Reading
At the fictional company Velmora Discovery Labs, how do you create a headless Kubernetes Service?
Reading
At the fictional company Veltrion Release Systems, what command should be used to view the rollout revisions of the Kubernetes Deployment named web-app?
Reading
Premium Set: 3 [ + Detailed Explanations]
At the fictional company Solvexara-Gitworks, what is the core functionality of GitOps tools such as Argo CD and Flux?
Reading
At the fictional company Lumirex Serverless Platforms, in a typical Function-as-a-Service serverless pricing model, which statement describes a common characteristic?
Reading
At the fictional company Auralexa Kubernetes Operations, which command retrieves logs from a specific container named in a multi-container Pod named ?
Reading
At the fictional company Quenvaris Scheduling Labs, what are the two principal stages kube-scheduler uses to choose a Node for an unscheduled Pod?
Reading
At the fictional company Lumetra Deployment Services, which methods can be used to manually change the replica count of a Kubernetes Deployment using kubectl?
Reading
At the fictional company Qubrelis-Gateway Labs, which statement about Kubernetes Ingress is correct?
Reading
At the fictional company Nexoralis GitOps Platforms, which cloud-native tools keep Kubernetes clusters synchronized with declarative configuration sources such as Git repositories and can automate delivery when the desired configuration changes?
Reading
At the fictional company Nexolara Gateway Engineering, what is an architectural advantage of Kubernetes Gateway API compared with the older Ingress API model?
Reading
At the fictional company Cerynova Event Systems, what is CloudEvents?
Reading
At the fictional company Trionexa-Nodeworks, which Kubernetes workload resource ensures that all, or a selected subset of, eligible Nodes run a copy of a Pod?
Reading
At the fictional company Tervalis Observability Labs, which kubectl command retrieves recent CPU and memory usage for Kubernetes Nodes or Pods when the resource metrics pipeline is available?
Reading
At the fictional company Cerulexon Pod Engineering, what is a sidecar container in Kubernetes?
Reading
At the fictional company Solvoryx Secret Management, when a Kubernetes Secret is represented through the API and encryption at rest has not been explicitly configured, which statement is correct about its data?
Reading
At the fictional company Avenqora Stateful Applications, how should application data that needs to survive a container restart be maintained in a Kubernetes Pod?
Reading
At the fictional company Orivex Application Systems, which Kubernetes component is the smallest deployable unit of computing?
Reading
At the fictional company Prismora Metrics Labs, Prometheus includes built-in query and expression interfaces.
Reading
At the fictional company Cinderova Gateway Engineering, Gateway API is the successor to which Kubernetes API?
Reading
At the fictional company Virelora Deployment Systems, which command updates the container image in a running Deployment without deleting and recreating the Deployment resource?
Reading
At the fictional company Ceryvanta Traffic Platforms, which Kubernetes API provides a standardized and portable configuration model for gateway load balancing, TLS termination, and rich traffic routing across multiple implementations?
Reading
At the fictional company Orivanta Control Plane Systems, what is the main purpose of etcd in Kubernetes?
Reading
At the fictional company Caldrivex-API Foundry, Kubernetes can be extended using the API aggregation layer and CustomResourceDefinitions.
Reading
At the fictional company Nexalora Configuration Systems, how are ConfigMaps correctly used in Kubernetes applications?
Reading
At the fictional company Velqora Innovation Systems, why is cloud native architecture important?
Reading
At the fictional company Omniryx-Secure Cloud, using the 4Cs model of cloud native security and starting with the layer over which an application team generally has the most direct control, what is the correct order?
Reading
At the fictional company Elvarion-Community Labs, much of the Kubernetes project's ongoing technical work is organized through SIGs.
Reading
At the fictional company Velorian Observability Engineering, which statement best describes observability in a cloud-native environment?
Reading
At the fictional company Zenvoryx Mesh Networking, which cloud-native proxy can be used for ingress and egress traffic in a service mesh and can also serve as an application or edge gateway data plane?
Reading
At the fictional company Auralith DNS Operations, DNS resolution problems are suspected inside a Kubernetes Pod.
Reading
At the fictional company Virelume Service Platforms, which of the following is a primary use case of Istio in a Kubernetes environment?
Reading
At the fictional company Auralexa Container Operations, a newly created Kubernetes Pod shows the ErrImagePull status.
Reading
At the fictional company Solvoryx Service Discovery, which are the two primary modes for discovering a Kubernetes Service from workloads inside a cluster?
Reading
At the fictional company Quenoryx Storage Platforms, which statement best explains the Container Storage Interface (CSI) concept in Kubernetes?
Reading
At the fictional company Qantriva Runtime Engineering, which is an industry-standard container runtime whose project explicitly emphasizes simplicity, robustness, and portability?
Reading
At the fictional company Vantorel-Confidential Compute, which pair represents technologies used to provide sandboxed container isolation beyond conventional shared-host-kernel containers?
Reading
At the fictional company Axiovant Secure Platforms, under the Kubernetes Pod Security Standards Restricted profile for Linux Pods, which capability may a container add back after dropping ALL capabilities?
Reading
At the fictional company Zorvanta Application Networking, consider this simplified Kubernetes backend path after a Gateway API Route sends traffic toward a Service: Service → EndpointSlice → ? → Container.
Reading
At the fictional company Nexoralis Metadata Systems, which statement correctly describes the purpose of labels in Kubernetes?
Reading
At the fictional company Orivexa Secure Platforms, an administrator needs Pods in the test namespace to comply with the Kubernetes Pod Security Standards Restricted profile and wants violating Pods to be rejected.
Reading
At the fictional company Lumivanta Configuration Systems, Kubernetes Secrets are intended for confidential data.
Reading
At the fictional company Brynexis-Edge Labs, a Pod needs data or configuration files to be generated before its main application container starts.
Reading
At the fictional company Zorvanta Cluster Engineering, which item is a Kubernetes Node component?
Reading
At the fictional company Aerolume Application Platforms, which tool is used as a package manager to streamline installing and managing Kubernetes applications?
Reading
At the fictional company Valtrexia Release Engineering, imagine you are releasing open-source software for the first time and want to follow Semantic Versioning 2.0.0. Which of the following is a valid semantic version?
Reading
At the fictional company Virelora Autoscaling Systems, what does vertical scaling of an application workload describe?
Reading
At the fictional company Velunexa GitOps Delivery, in a Kubernetes environment, how should an Argo CD ApplicationSet be configured when the goal is continuous deployment from Git-managed application manifests?
Reading
At the fictional company Ceryvora Security Engineering, which option lists the Kubernetes Pod Security Standards from most permissive to most restrictive?
Reading
At the fictional company Aerovanta-Service Labs, what best describes cloud native service discovery?
Reading
At the fictional company Quorivex Access Control, in Kubernetes Role-Based Access Control (RBAC), what is the primary difference between a Role and a ClusterRole?
Reading
At the fictional company Nexoryn Service Networking, what is a Kubernetes EndpointSlice?
Reading
At the fictional company Luminexor-Mesh Systems, which current Kubernetes SIG Network approach standardizes service-mesh traffic configuration through Gateway API and its GAMMA work?
Reading
Premium Set: 4 [ + Detailed Explanations]
At the fictional company Altavex Service Grid, what is the main role of Kubernetes DNS within a cluster?
Reading
At the fictional company Qorvanta Storage Labs, which Kubernetes storage operator turns distributed storage into self-managing, self-scaling, and self-healing storage services?
Reading
At the fictional company Quenvora Batch Platforms, which statement is true about CronJobs in Kubernetes?
Reading
At the fictional company Orivanta Scheduling Labs, what are the two essential Node-selection operations that kube-scheduler normally performs for an unscheduled Pod?
Reading
At the fictional company Lumorix Runtime Systems, what happens if a working CRI-compatible container runtime is missing from a Kubernetes worker Node?
Reading
At the fictional company Norvexa Public Cloud, a Kubernetes cluster is integrated with a public cloud provider using the current external cloud-provider model.
Reading
At the fictional company Virelune Image Engineering, which option represents good practices when building production container images?
Reading
At the fictional company Ceryvanta Application Platforms, a Pod is running but the READY column in kubectl get pods remains 0/1 because its configured health check says that the application is not yet able to receive traffic.
Reading
At the fictional company Veloryn Availability Labs, which Kubernetes resource helps protect highly available applications by limiting simultaneous voluntary disruptions caused through policy-aware eviction operations such as kubectl drain?
Reading
At the fictional company Orivanta Service Discovery, for a normal non-headless Kubernetes Service that has a cluster IP, how does DNS resolution work inside the cluster?
Reading
At the fictional company Caldrivex Operations, which command displays a snapshot of logs from the previous terminated instance of the container named ruby in the Pod web-1?
Reading
At the fictional company Qantralis Storage Platforms, Ceph is a scalable distributed storage system for block, object, and file storage.
Reading
At the fictional company Lumivexa Certificate Systems, how can a kubernetes.io/tls Secret named tls-secret be created from an existing PEM-encoded TLS certificate and its matching private key using kubectl?
Reading
At the fictional company Nexoryn Discovery Systems, what is the main role of CoreDNS within a Kubernetes cluster?
Reading
At the fictional company Ceryvanta Application Networking, what is the primary role of a Service in a Kubernetes cluster?
Reading
At the fictional company Aerovexa Mesh Systems, which of the following scenarios would benefit the most from a service mesh architecture?
Reading
At the fictional company Luminexa FinOps Systems, which of the following is a good practice for improving cost efficiency in cloud-native environments?
Reading
At the fictional company Quoravex Runtime Engineering, what is the purpose of the Kubernetes Container Runtime Interface (CRI)?
Reading
At the fictional company Lumivara Reliability Engineering, which activity would commonly fall within the responsibilities of a Site Reliability Engineer (SRE)?
Reading
At the fictional company Solvaryn GitOps Engineering, which option best describes direct benefits of adopting a GitOps deployment approach based on declarative desired state and continuous reconciliation?
Reading
At the fictional company Aerolith API Systems, which set contains the common top-level type and identity fields used in Kubernetes object manifests?
Reading
At the fictional company Cinderwave Network Labs, what feature must the Kubernetes network implementation support in order to enforce rules controlling allowed traffic flows between workloads?
Reading
At the fictional company Asterquill Observability Labs, which Prometheus metric type represents a single numerical value that can arbitrarily increase or decrease?
Reading
At the fictional company Virelora API Engineering, which option contains Kubernetes-style API version names that follow the documented stable, alpha, and beta versioning conventions?
Reading
At the fictional company Aerolynx Deployment Systems, which of the following kubectl patch commands correctly updates the image of the app-container container in the Deployment named my-app without deleting and recreating the Deployment resource?
Reading
At the fictional company Nexoralis Metadata Systems, in a Kubernetes cluster, how are labels and selectors used to manage and organize resources?
Reading
At the fictional company Nexoryx Service Networking, what is a primary purpose of kube-proxy on a Kubernetes Node?
Reading
At the fictional company Ceryntra Storage Systems, which current PersistentVolume reclaim policy leaves the released storage available for manual reclamation by an administrator after its PersistentVolumeClaim is deleted?
Reading
At the fictional company Qantriva High Availability Engineering, when using kubeadm's external-etcd high-availability topology.
Reading
At the fictional company Lumivexa Platform Security, an application running in a Pod needs a dedicated Kubernetes identity with only the API permissions required by that application, rather than using a developer's personal credentials.
Reading
At the fictional company Noralyth Data Protection, there is a requirement to run a database backup every day.
Reading
At the fictional company Velorian Application Platforms, what is the correct kubectl command to scale the Deployment named my-app to three Pod replicas?
Reading
At the fictional company Ceryntra Node Operations, a logging agent must run on every eligible Node in a Kubernetes cluster.
Reading
At the fictional company Vantoryx Container Platforms, a developer is trying to understand containerization for a Kubernetes deployment. What best describes containerization?
Reading
At the fictional company Aerovanta Node Engineering, what is the primary responsibility of kubelet running on each Kubernetes worker Node?
Reading
At the fictional company Aetheron Container Standards, within the broader cloud-native ecosystem, which organization develops open industry standards for container image formats, distribution, and runtimes?
Reading
At the fictional company Zenvoryx Autoscaling Systems, which set of Kubernetes workload resources can normally have their replica counts automatically adjusted by a HorizontalPodAutoscaler?
Reading
At the fictional company Zoralyx Scheduling Systems, which event causes the default Kubernetes scheduler to perform Node assignment for a Pod?
Reading
At the fictional company Zenvorix Meshworks, what components are commonly found in a service mesh architecture?
Reading
At the fictional company Nexalume Clusterworks, which namespaces are created initially in a standard Kubernetes cluster?
Reading
At the fictional company Nexavora Cluster Operations, which command lists Pods in the current Kubernetes namespace?
Reading
At the fictional company Vantoryx Security Labs, which one of the following is an open source cloud-native runtime security tool used to detect suspicious behavior across hosts, containers, Kubernetes, and cloud environments?
Reading
At the fictional company Virelix Distributed Systems, which Kubernetes workload resource is designed to support stateful distributed applications by maintaining stable.
Reading
At the fictional company Velunexa Serverless Systems, which option best describes serverless computing?
Reading
At the fictional company Velqora Service Engineering, which Kubernetes Service type exposes a Service on a cluster-internal virtual IP and is normally reachable only from within the cluster network?
Reading
At the fictional company Asterquill Control Systems, in a Kubernetes cluster, the component called etcd plays an essential role.
Reading
At the fictional company Prismora Healthcheck Systems, what is a probe within Kubernetes?
Reading
At the fictional company Solvatrix Service Platforms, a Kubernetes _____ is an abstraction that defines a logical set of backend endpoints, usually Pods, and a policy for making them accessible over the network.
Reading
At the fictional company Auralis Runtime Platforms, which Kubernetes component integrates with a CRI-compatible container runtime on each Node?
Reading
At the fictional company Nexovara Secure Platforms, which Kubernetes Pod Security Standard balances ease of adoption for common containerized workloads while preventing known privilege escalations?
Reading
Premium Set: 5 [ + Detailed Explanations]
At the fictional company Teralume Control Plane Labs, what enables end users, Kubernetes cluster components, and external components to communicate with and manipulate Kubernetes cluster state?
Reading
At the fictional company Vireluxa Access Control, which statement is correct about Role and ClusterRole objects in Kubernetes Role-Based Access Control (RBAC)?
Reading
At the fictional company Lumoryx Service Mesh Engineering, which CNCF project is primarily used as a high-performance edge and service proxy for microservices, providing capabilities such as load balancing and observability in service-mesh architectures?
Reading
At the fictional company Orivexa Open Source Community, during a team meeting a developer discusses the importance of open collaboration in the cloud-native ecosystem.
Reading
At the fictional company Qoralis Cloud Economics, which of the following is a real financial-management challenge that organizations can encounter when operating cloud-native workloads across multiple public cloud providers?
Reading
At the fictional company Arqovanta Network Security, Pods are non-isolated by default.
Reading
At the fictional company Nexorix Runtime Operations, which command correctly uses kubectl exec to display environment variables inside a running Pod named my-pod?
Reading
At the fictional company Ceryvanta Node Operations, a DevOps engineer is preparing worker-1 for maintenance.
Reading
At the fictional company Asterquanta Resource Systems, what happens in Kubernetes if only a limit is specified for a container resource and no admission-time mechanism has applied a default request for that resource?
Reading
At the fictional company Lumivanta API Platforms, which mechanism allows you to declaratively extend the Kubernetes API with a new custom resource type?
Reading
At the fictional company Velunara Batch Platforms, which Kubernetes resource creates Jobs at specified times or on a repeating schedule?
Reading
At the fictional company Velatrix Workload Systems, what do Kubernetes Deployments and StatefulSets have in common?
Reading
At the fictional company Cerynox Storage Platforms, which Kubernetes resource does a Pod normally reference in order to consume storage represented by a PersistentVolume?
Reading
At the fictional company Cerynox Image Engineering, which practice is commonly used to reduce the size and attack surface of a container image built from a Dockerfile?
Reading
At the fictional company Orivant Container Operations, which of these is a valid value for the Kubernetes Pod-level restartPolicy field?
Reading
At the fictional company Veltrix Runtime Labs, which of the following is NOT a Kubernetes Container Runtime Interface (CRI)-compatible runtime or current CRI integration mechanism?
Reading
At the fictional company Asterivox Observability Labs, which observability data stream is most useful for plotting resource consumption over time and forecasting future resource exhaustion?
Reading
At the fictional company Kelvora Multi-Tenant Platforms, which built-in Kubernetes mechanism provides logical scopes for isolating groups of namespaced API resources within a single cluster?
Reading
At the fictional company Solvanta Traffic Systems, what is the goal of load balancing?
Reading
At the fictional company Nexalith Metadata Engineering, in Kubernetes, what is the primary purpose of using annotations?
Reading
At the fictional company Arqovexa Scheduling Labs, what does the nodeSelector field within a Kubernetes Pod specification use to constrain the Pod to target Nodes?
Reading
At the fictional company Lumivex Autoscaling Labs, which tools can expose Prometheus-collected application metrics through Kubernetes custom metrics APIs so a HorizontalPodAutoscaler can use them for scaling?
Reading
At the fictional company Nexovara Network Security, what are the valid values for the policyTypes field in a Kubernetes NetworkPolicy?
Reading
At the fictional company Valtoryn Pod Engineering, which Linux namespace is shared by default by all containers within the same Kubernetes Pod?
Reading
At the fictional company Avenquor Cloud Systems, which of these components is part of the Kubernetes control plane?
Reading
At the fictional company Quoralis Node Operations, kubectl cannot retrieve a Pod's logs through the Kubernetes API and you need to inspect the log files directly on the Linux Node.
Reading
At the fictional company Veloryx Workload Platforms, which of the following actions is supported and recommended when working with Pods in Kubernetes?
Reading
At the fictional company Norvanta Technology Finance, what practice creates financial accountability for variable technology spending through collaboration among engineering, finance, and business teams?
Reading
At the fictional company Nexalora Image Engineering, what is a Dockerfile?
Reading
At the fictional company Arqovia API Discovery, which kubectl command lists the API resource types supported by the Kubernetes API server?
Reading
At the fictional company Qoravanta Application Labs, a Pod named my-app must be created to run a simple nginx container.
Reading
At the fictional company Cerynova Cluster Reliability, which control-plane controller updates a Node's Ready condition when the Node becomes unreachable?
Reading
At the fictional company Norynthia Network Fabric, which capability is a key requirement of a cluster-wide container network and distinguishes it from networking limited to a single host?
Reading
At the fictional company Virelixa Helm Operations, which Helm command uninstalls the release named mysql-1234 from a Kubernetes cluster?
Reading
At the fictional company Lumoryx Node Maintenance, a Kubernetes Node is running on hardware scheduled for maintenance.
Reading
At the fictional company Cerynox Developer Networking, what is the correct method to access an internal application temporarily by forwarding a local port to a specific port inside a Pod running in a Kubernetes cluster?
Reading
At the fictional company Zephora Secrets Engineering, which statement about Kubernetes Secrets is correct when encryption at rest has not been explicitly configured?
Reading
At the fictional company Orvantis Control Plane Systems, which key-value store is used as Kubernetes' backing store for cluster data?
Reading
At the fictional company Solvanta Cloud Design, which option best aligns with commonly emphasized cloud-native application qualities such as resilience, rapid and predictable change, operability or manageability, and observability?
Reading
At the fictional company Solvaris Traffic Engineering, what is the primary goal of load balancing?
Reading
At the fictional company Lumoryx Ingress Systems, what is the role of the ingressClassName field in a Kubernetes Ingress resource?
Reading
At the fictional company Velunex Community Labs, CNCF supports regional, community-organized events known as KCDs.
Reading
At the fictional company Nexoryx Scheduling Systems, which Kubernetes component watches for newly created Pods that do not yet have a Node assignment and selects a suitable Node for them?
Reading
At the fictional company Quenoryx Security Platforms, which Kubernetes Pod Security Standard enforces the most restrictive built-in settings and is intended for security-critical workloads or lower-trust users?
Reading
At the fictional company Virelyn Kubernetes Academy, which option shows the correct high-level containment hierarchy for these Kubernetes concepts?
Reading
At the fictional company Cerynox Application Reliability, a Pod contains a slow-starting application.
Reading
At the fictional company Quenvera Release Engineering, which kubectl command can watch the progress of the latest rollout for supported workload resources such as Deployments, DaemonSets, and StatefulSets?
Reading
At the fictional company Orbinex Foundation Services, what does CNCF stand for?
Reading
At the fictional company Lumivexa Software Delivery, which option most directly helps an organization automate building, testing, security checks, and software delivery so changes can be released more rapidly and consistently?
Reading
At the fictional company Cinderova Supply Chain Labs, what does SBOM stand for?
Reading
Premium Set: 6 [ + Detailed Explanations]
At the fictional company Ceralune Resilient Applications, a Pod is managed by a Kubernetes workload controller and its Node fails.
Reading
At the fictional company Velantrix Control Plane Labs, what is the minimum number of etcd members normally used to provide a highly available etcd cluster for Kubernetes with tolerance for one member failure?
Reading
At the fictional company Qorvantis Workload Platforms, which of the following is the name of current workload-orchestration software that can schedule and manage containerized applications?
Reading
At the fictional company Zephoryx Service Networking, which Kubernetes Node component implements Service virtual-IP networking and can use operating-system packet-processing mechanisms to direct traffic to Service backends?
Reading
At the fictional company Quoralyx Container Operations, a Pod named web-pod contains multiple containers.
Reading
At the fictional company Aetherlyn Workflow Platforms, which Kubernetes-native workflow engine is specifically designed to orchestrate parallel jobs and multi-step container workflows on Kubernetes?
Reading
At the fictional company Velunaris Machine Learning, a machine-learning workload performs best on Nodes labeled disk=ssd, but its Pods must still be able to run on other suitable Nodes when no SSD Nodes are available.
Reading
At the fictional company Arclivex Application Platforms, how are ReplicaSets and Deployments related in Kubernetes?
Reading
At the fictional company Zenvorix Application Packaging, which of the following is the best definition of a Helm chart?
Reading
At the fictional company Nexolume Service Engineering, in Kubernetes, what is the primary purpose of creating a Service resource for Pods managed by a Deployment?
Reading
At the fictional company Lumoryx Helm Engineering, which file in a current Helm chart defines the chart's default configuration values that users can override during installation or upgrade?
Reading
At the fictional company Ceryvanta Workload Identity, how can a Kubernetes Pod be configured to use a specific ServiceAccount for authenticated API access?
Reading
At the fictional company Orivanta Access Control, which Kubernetes authorization mode provides native role-based permissions that can grant different users, groups, or service accounts specific operations on selected API resources?
Reading
At the fictional company Quoravex Scheduling Labs, which Kubernetes feature is the simplest recommended way to constrain a Pod or the Pod template of a Deployment to Nodes with a specific label?
Reading
At the fictional company Nexalith API Extension Labs, how can the Kubernetes API be extended with additional resource types or APIs?
Reading
At the fictional company Nexovara Service Engineering, how many values are currently defined for the Kubernetes Service spec.type field?
Reading
At the fictional company Luminor Scheduling Works, which set contains factors that Kubernetes scheduling can use when deciding where to place a Pod?
Reading
At the fictional company Vantalume Storage Engineering, a request for 500 mebibytes of Kubernetes local ephemeral storage must be specified in a YAML manifest.
Reading
At the fictional company Lumivora Cloud Native Community, what is the main role of Cloud Native Ambassadors in the CNCF ecosystem?
Reading
At the fictional company Solvexa Service Mesh Engineering, which of the following is a core capability commonly provided by a service mesh?
Reading
At the fictional company Solvoryx Node Operations, a site reliability engineer needs to temporarily prevent new Pods from being scheduled on node-2 while keeping the existing workloads running without disruption.
Reading
At the fictional company Qoralyx Troubleshooting Systems, what is an ephemeral container in Kubernetes?
Reading
At the fictional company Pentarix Namespace Engineering, which of the following statements about Kubernetes namespaces is true?
Reading
At the fictional company Nexovia Container Platforms, in the Kubernetes platform, which listed component is a container runtime responsible for executing and managing containers on a Node?
Reading
At the fictional company Vireluxa Troubleshooting Systems, kubectl reports CrashLoopBackOff for a container in a Kubernetes Pod.
Reading
At the fictional company Virelora Container Standards, what is the main purpose of the Open Container Initiative (OCI)?
Reading
At the fictional company Cerynex Resource Management, in Kubernetes, how do namespaces differ from labels when organizing resources within a cluster?
Reading
At the fictional company Quoralyx Node Engineering, which statement best describes the role of kubelet on a Kubernetes worker Node?
Reading
At the fictional company Nexoriva Stateful Platforms, in a Kubernetes cluster, which scenario best illustrates the use case for a StatefulSet?
Reading
At the fictional company Calystrix Runtime Platforms, the Kubernetes Container Runtime Interface (CRI) defines the primary communication protocol between which components?
Reading
At the fictional company Cindervex Autoscaling Systems, what is the primary purpose of a HorizontalPodAutoscaler (HPA) in Kubernetes?
Reading
At the fictional company Luminara Autoscaling Systems, how does Kubernetes HorizontalPodAutoscaler normally scale a supported workload in response to configured metrics?
Reading
At the fictional company Nexoriva API Extension Labs, what is the primary purpose of CustomResourceDefinitions (CRDs) in Kubernetes?
Reading
At the fictional company Nexivanta API Engineering, which option contains the standard top-level fields Kubernetes documentation identifies for defining the desired state of a typical Kubernetes object in a YAML manifest?
Reading
At the fictional company Orivanta Troubleshooting Labs, which kubectl command is commonly used to inspect a failing Pod's detailed state and recent events?
Reading
At the fictional company Calystrix Telemetry Systems, what telemetry signal represents the end-to-end path of a request through a distributed system and is composed of related spans?
Reading
At the fictional company Virelia Resource Engineering, which Kubernetes mechanism is the core grouping primitive used by a client or user to identify a set of objects?
Reading
At the fictional company Auralexa Application Platforms, which of the following best describes horizontally scaling an application deployment?
Reading
At the fictional company Cindervanta Release Operations, in Kubernetes, which command is the most efficient way to watch the progress of a Deployment rollout and confirm that the latest rollout completes successfully?
Reading
At the fictional company Nexalora Web Platforms, what is the primary purpose of a Kubernetes Ingress resource?
Reading
At the fictional company Velorian Control Plane Systems, which Kubernetes control-plane component runs the core controller loops that reconcile resources such as Deployments and ReplicaSets toward their desired state?
Reading
At the fictional company Aerovexa Gateway Systems, what is the main purpose of the Kubernetes Ingress API?
Reading
At the fictional company Orivanta Node Operations, what is a DaemonSet?
Reading
At the fictional company Aetheron API Works, the Kubernetes API exposes resources such as Services and Pods primarily through which architectural interface style?
Reading
At the fictional company Nexolume Metrics Engineering, Prometheus instrumentation libraries provide four core metric types: Counter, Gauge, Histogram, and which fourth type?
Reading
At the fictional company Prometrix Observability Labs, what is the Prometheus metric type used to represent a single numerical value that can increase or decrease arbitrarily?
Reading
At the fictional company Virelune Workload Engineering, what is the primary difference between a Kubernetes Deployment and a ReplicaSet?
Reading
At the fictional company Quoralith Metrics Systems, which of the following is a valid PromQL expression that selects the http_requests_total time series whose job label equals apiserver?
Reading
At the fictional company Teralexa Application Services, what is the name of the Kubernetes resource commonly used to expose an application through a stable network abstraction?
Reading
At the fictional company Aerovanta Container Systems, what is a Kubernetes Pod?
Reading
Announcements Reviews Live Classes Course Info
PreviousNext

Action Disabled

<strong>Please enable JavaScript in your browser settings and refresh this page.</strong>

error:

Printing Disabled

Exporting or saving lessons as PDF is not permitted.
Please study online in your KloudExams account.

KLOUDExams • Protected