Download Certified Kubernetes Application Developer (CKAD-JP) Exam and more Exams Technology in PDF only on Docsity!
Certified Kubernetes Application Developer (CKAD-JP) Practice Exam
1. Which component in Kubernetes is responsible for scheduling pods on worker nodes? A) kube-apiserver B) kube-controller-manager C) kube-scheduler D) kubelet Answer: C Explanation: The kube-scheduler is in charge of placing pods on appropriate worker nodes based on resource availability and scheduling policies. 2. In Kubernetes, what does a Pod represent? A) A group of nodes B) A single container instance C) A logical host for one or more containers D) A network interface Answer: C Explanation: A Pod is the smallest deployable unit that can host one or more containers, sharing the same network namespace and storage. 3. What is the primary function of a ReplicaSet? A) To store configuration data B) To maintain a stable set of replica pods C) To schedule pods on nodes D) To manage network policies Answer: B Explanation: A ReplicaSet ensures that a specified number of pod replicas are running at any given time. 4. Which Kubernetes component acts as the front-end to the cluster and exposes the API? A) kube-proxy B) kube-scheduler C) kube-apiserver D) etcd Answer: C Explanation: The kube-apiserver serves as the front-end for the Kubernetes control plane, handling API requests. 5. What is the purpose of a Namespace in Kubernetes? A) To manage network routes B) To isolate resources within a cluster C) To scale applications D) To configure storage classes
Answer: B Explanation: Namespaces partition cluster resources between multiple users and teams, providing isolation.
6. Which Kubernetes object is primarily used to expose a set of pods to network traffic within the cluster? A) Deployment B) Service C) ConfigMap D) Ingress Answer: B Explanation: A Service provides a stable network endpoint to access a set of pods regardless of their individual IP addresses. 7. How do ConfigMaps differ from Secrets in Kubernetes? A) ConfigMaps store binary data; Secrets store textual data. B) ConfigMaps store sensitive data; Secrets store non-sensitive data. C) ConfigMaps store non-sensitive configuration data; Secrets store sensitive information. D) There is no difference. Answer: C Explanation: ConfigMaps are used for non-sensitive configuration information, while Secrets handle sensitive data like passwords and keys. 8. Which field in a pod's YAML manifest is used to specify the container image? A) metadata B) spec C) apiVersion D) kind Answer: B Explanation: The container image is specified within the pod's spec section under the containers list. 9. What does the term “rolling update” refer to in Kubernetes deployments? A) Replacing all pods simultaneously B) Gradually replacing old pods with new ones C) Scaling down the cluster D) Creating a backup of the pods Answer: B Explanation: A rolling update methodically replaces old pods with new versions, minimizing downtime. 10. In Kubernetes, what is a DaemonSet used for? A) Running a pod on every node in the cluster B) Managing persistent storage C) Exposing external services D) Scheduling batch jobs
Answer: B Explanation: Node selectors filter nodes based on labels, ensuring that pods are scheduled only on nodes that meet specific criteria.
16. What do Taints and Tolerations in Kubernetes control? A) Container image versions B) Pod scheduling on nodes C) Network routing D) Data persistence Answer: B Explanation: Taints prevent pods from being scheduled on certain nodes unless the pods have matching tolerations. 17. Which command is used to view detailed information about a specific pod? A) kubectl get pods B) kubectl describe pod [pod-name] C) kubectl logs [pod-name] D) kubectl exec [pod-name] Answer: B Explanation: The command “kubectl describe pod [pod-name]” provides detailed information about the pod, including events and status. 18. How are environment variables typically injected into a container in Kubernetes? A) Through the node configuration B) By editing the kubelet config file C) Using the env field in the pod's container specification D) With service account tokens Answer: C Explanation: Environment variables are set via the env field inside the container specification in the pod’s YAML file. 19. What is the primary role of Helm in Kubernetes? A) To monitor cluster performance B) To manage container networking C) To package, deploy, and manage Kubernetes applications D) To enforce security policies Answer: C Explanation: Helm is a package manager that simplifies the deployment and management of Kubernetes applications through charts. 20. Which of the following is NOT a service type in Kubernetes? A) ClusterIP B) NodePort
C) LoadBalancer D) PodPort Answer: D Explanation: PodPort is not a recognized service type in Kubernetes; the valid types include ClusterIP, NodePort, LoadBalancer, and ExternalName.
21. How does Kubernetes perform service discovery for pods? A) Through static IP addresses B) Using an integrated DNS service C) With manual host file configuration D) By querying etcd directly Answer: B Explanation: Kubernetes uses an integrated DNS service to enable service discovery by mapping service names to IP addresses. 22. What is the primary function of an Ingress resource in Kubernetes? A) To manage internal pod communication B) To expose HTTP and HTTPS routes from outside the cluster to services C) To manage persistent storage D) To enforce network security policies Answer: B Explanation: Ingress resources define rules for routing external HTTP and HTTPS traffic to the appropriate services within the cluster. 23. Which Kubernetes object would you use to run scheduled batch jobs? A) Deployment B) StatefulSet C) CronJob D) ReplicaSet Answer: C Explanation: A CronJob creates Jobs on a repeating schedule to handle batch processing tasks. 24. When configuring a Secret, what type of data encoding is typically used for its values? A) Hexadecimal B) Base C) Plain text D) URL encoding Answer: B Explanation: Kubernetes Secrets require that the data be encoded in Base64. 25. In a Kubernetes Deployment, what is the purpose of a rollback? A) To scale the number of pods B) To revert to a previous stable version of the application
C) They automate container scheduling. D) They enable auto-scaling of nodes. Answer: B Explanation: Persistent Volumes decouple storage from pods, allowing data to persist even if the pod is rescheduled or deleted.
31. Which Kubernetes object is used to group and select a set of pods based on labels? A) Service B) ConfigMap C) Deployment D) Label Selector Answer: D Explanation: Label selectors are used to identify and group pods based on their labels, which is crucial for controllers like ReplicaSets and Deployments. 32. What does the term “scaling” refer to in the context of Kubernetes Deployments? A) Increasing the number of replicas B) Modifying the container image C) Changing network policies D) Updating ConfigMaps Answer: A Explanation: Scaling in Kubernetes typically involves adjusting the number of pod replicas to handle varying workloads. 33. Which Kubernetes component is responsible for maintaining the desired state of the cluster? A) etcd B) kube-controller-manager C) kube-scheduler D) kube-proxy Answer: B Explanation: The kube-controller-manager continuously works to maintain the desired state of cluster resources as specified by the user. 34. What role do labels play in Kubernetes? A) They determine which container image to use. B) They enable identification and grouping of resources. C) They manage network traffic. D) They store sensitive configuration data. Answer: B Explanation: Labels are key-value pairs attached to resources that facilitate filtering, selection, and organization within Kubernetes. 35. Which of the following best describes a Service Account in Kubernetes? A) A method for scaling pods
B) A special type of user account for processes running in a pod C) A component for persistent storage D) A tool for monitoring resource usage Answer: B Explanation: Service accounts provide an identity for processes that run in a pod, enabling fine-grained access control to the cluster.
36. Which field in a pod manifest specifies the container's port to be exposed? A) containerPort B) servicePort C) nodePort D) targetPort Answer: A Explanation: The containerPort field in the pod specification is used to declare which port the container will expose. 37. What is the primary function of the kube-proxy on a Kubernetes node? A) Scheduling pods B) Managing network routing for services C) Handling persistent storage D) Encrypting secrets Answer: B Explanation: The kube-proxy manages network routing by implementing virtual IPs for services and load balancing traffic to pods. 38. In Kubernetes YAML manifests, what does the apiVersion field indicate? A) The version of the container image B) The Kubernetes API version used for the object C) The application version deployed D) The node operating system version Answer: B Explanation: The apiVersion field specifies which version of the Kubernetes API should be used to interpret the object definition. 39. What does the term “dynamic provisioning” refer to in the context of Kubernetes storage? A) Manual creation of storage volumes B) Automated creation of storage volumes as needed C) Scaling of network resources D) Updating container images on the fly Answer: B Explanation: Dynamic provisioning automatically creates persistent volumes when a PersistentVolumeClaim is created, based on a StorageClass.
Answer: A Explanation: Secrets can be exposed to pods either as environment variables or as files mounted into a volume, allowing secure access to sensitive data.
45. What is the primary purpose of a Helm chart? A) To monitor resource usage B) To package and deploy Kubernetes applications C) To enforce security policies D) To manage persistent storage Answer: B Explanation: Helm charts are packages that contain all resource definitions necessary to deploy an application on Kubernetes. 46. Which Kubernetes command would you use to apply changes defined in a YAML manifest? A) kubectl create B) kubectl apply C) kubectl update D) kubectl set Answer: B Explanation: The command “kubectl apply” is used to create or update resources as defined in a YAML manifest file. 47. In a Kubernetes Deployment, what does the term “replicas” refer to? A) The number of nodes in the cluster B) The number of copies of a pod running simultaneously C) The version number of the application D) The number of configuration files Answer: B Explanation: Replicas represent the desired number of identical pod copies that should be running to ensure high availability. 48. What does a readiness probe check for in a container? A) Whether the container’s file system is accessible B) Whether the container is fully initialized and ready to serve traffic C) Whether the container image is valid D) Whether the pod has been scheduled to a node Answer: B Explanation: Readiness probes determine if a container is prepared to handle requests, ensuring that traffic is only sent to healthy pods. 49. What is the function of the “kubectl logs” command? A) To retrieve the status of nodes B) To display the logs of a container within a pod
C) To manage network policies D) To apply configuration changes Answer: B Explanation: “kubectl logs” retrieves and displays the log output from containers running in a specified pod.
50. Which scheduling feature allows Kubernetes to avoid placing pods on nodes with specific conditions? A) Node affinity B) Taints and tolerations C) Resource limits D) Service accounts Answer: B Explanation: Taints on nodes repel pods unless the pod has a corresponding toleration, helping to prevent scheduling on unsuitable nodes. 51. Which of the following best describes a CronJob in Kubernetes? A) A continuously running service B) A job that runs once at startup C) A job scheduled to run at specified time intervals D) A persistent storage management tool Answer: C Explanation: CronJobs allow you to schedule jobs that run periodically at specified times or intervals. 52. In Kubernetes, what is the primary purpose of using labels with Deployments? A) To specify container images B) To control pod placement based on resource availability C) To identify and manage the group of pods under the deployment D) To manage network routing Answer: C Explanation: Labels are used in Deployments to group and manage the pods they create, making it easier to select and update them. 53. What does the “kubectl get events” command display? A) Detailed configuration of pods B) Logs of container output C) Recent events in the cluster for debugging purposes D) The status of persistent volumes Answer: C Explanation: The command “kubectl get events” shows recent cluster events, which can help in diagnosing issues and understanding pod lifecycle events. 54. How does Kubernetes ensure that an application is deployed across multiple nodes? A) By using StatefulSets exclusively
59. What is the main advantage of using a Helm chart in a CI/CD pipeline? A) It improves container security. B) It automates the deployment and upgrade of applications. C) It increases network throughput. D) It stores application logs. Answer: B Explanation: Helm charts simplify and automate the deployment and upgrade process for Kubernetes applications, making them well-suited for CI/CD pipelines. 60. What is the purpose of the “kubectl exec” command? A) To execute commands inside a running container B) To update deployment configurations C) To apply YAML manifest files D) To monitor resource usage Answer: A Explanation: “kubectl exec” allows you to run commands directly inside a container, which is useful for debugging and troubleshooting. 61. Which of the following is a valid reason to use Pod Anti-Affinity? A) To ensure pods are scheduled on the same node B) To prevent pods from being scheduled on the same node as certain other pods C) To assign specific network routes D) To define container resource limits Answer: B Explanation: Pod Anti-Affinity prevents pods from being co-located on the same node as other specified pods, aiding in workload distribution and fault tolerance. 62. How can you expose sensitive configuration data to a pod without embedding it in the image? A) Using a Deployment B) Mounting a ConfigMap C) Using a Secret D) Creating a ReplicaSet Answer: C Explanation: Secrets allow you to securely pass sensitive data to pods without embedding it into container images. 63. What does the “kubectl apply - f” command do? A) Deletes resources defined in the manifest B) Updates or creates resources based on the manifest file C) Displays pod logs D) Scales the number of pod replicas
Answer: B Explanation: “kubectl apply - f” is used to create or update Kubernetes resources using the definitions in a manifest file.
64. Which Kubernetes component is responsible for storing the entire cluster state? A) kube-controller-manager B) kube-scheduler C) etcd D) kubelet Answer: C Explanation: etcd is a distributed key-value store that holds the state of the Kubernetes cluster. 65. In Kubernetes, what is the primary benefit of using a Service of type ClusterIP? A) It exposes the service externally B) It provides a stable internal IP address for communication within the cluster C) It increases the number of replicas automatically D) It encrypts data traffic Answer: B Explanation: A ClusterIP service offers a stable internal IP for accessing services from within the cluster, facilitating service discovery. 66. What is the main function of the kube-controller-manager’s ReplicaSet controller? A) To create and update ConfigMaps B) To maintain the desired number of pod replicas C) To handle network routing D) To encrypt secret data Answer: B Explanation: The ReplicaSet controller ensures that the specified number of pod replicas are always running in the cluster. 67. Which feature allows a pod to execute code before it starts or terminates? A) Probes B) Lifecycle hooks C) Node selectors D) Resource requests Answer: B Explanation: Lifecycle hooks, such as preStop and postStart, allow you to execute custom code at specific points in a container’s lifecycle. 68. What is the purpose of a Helm release? A) To permanently delete an application B) To maintain a specific version of a deployed Helm chart C) To store container images D) To manage persistent storage
C) apiVersion D) kind Answer: B Explanation: The metadata field contains information such as the name, labels, and annotations for a Kubernetes object.
74. What is the primary purpose of a ServiceAccount in Kubernetes? A) To create and manage persistent storage B) To provide an identity for processes running in a pod for API access C) To define network routing rules D) To manage pod replicas Answer: B Explanation: ServiceAccounts supply an identity for processes within pods, enabling them to interact with the Kubernetes API securely. 75. Which component provides load balancing for services in Kubernetes clusters? A) kube-scheduler B) kube-controller-manager C) kube-proxy D) etcd Answer: C Explanation: kube-proxy manages network rules on nodes, which allows it to load balance traffic across pods that are part of a service. 76. What does “pod disruption budget” help with in Kubernetes? A) It sets resource limits for pods. B) It ensures a minimum number of pods remain available during disruptions. C) It controls the scheduling of pods based on labels. D) It manages pod security policies. Answer: B Explanation: A pod disruption budget ensures that a specified number of pods remain available during voluntary disruptions like node maintenance. 77. Which Kubernetes object is primarily used for running containers that perform one-time tasks? A) Deployment B) Job C) CronJob D) DaemonSet Answer: B Explanation: A Job creates one or more pods to run a task to completion, making it ideal for one-time batch operations. 78. How do you specify a container’s resource request for CPU in a pod manifest? A) Under metadata.labels
B) In the resources.requests field within the container spec C) In the resources.limits field D) In the nodeSelector field Answer: B Explanation: The resources.requests field specifies the minimum amount of CPU required by a container.
79. Which Kubernetes command is used to debug a running container by opening an interactive shell? A) kubectl logs B) kubectl exec - it [pod-name] -- /bin/sh C) kubectl describe pod D) kubectl attach Answer: B Explanation: “kubectl exec - it [pod-name] -- /bin/sh” opens an interactive shell inside a container, allowing you to debug it in real time. 80. What is the purpose of defining a StorageClass in Kubernetes? A) To classify different types of container images B) To define the parameters for dynamic storage provisioning C) To manage network policies D) To control pod scheduling Answer: B Explanation: StorageClasses specify the parameters and types of storage to be used for dynamic provisioning of persistent volumes. 81. Which field in a StatefulSet ensures each pod gets a unique identity? A) serviceName B) replicas C) selector D) template Answer: A Explanation: The serviceName field in a StatefulSet is used in conjunction with a Headless Service to provide a stable network identity for each pod. 82. In Kubernetes, which mechanism is used to check the health of a running container? A) Lifecycle hooks B) Liveness probes C) Node selectors D) ConfigMaps Answer: B Explanation: Liveness probes determine whether a container is healthy and should continue running; if not, it may be restarted.
88. What is the function of the “kubectl describe” command? A) It displays a summary of logs from a pod B) It provides detailed information about a resource C) It deletes a resource D) It scales a deployment Answer: B Explanation: “kubectl describe” gives a detailed overview of a Kubernetes resource, including configuration, status, and events. 89. In Kubernetes, how is a ConfigMap typically referenced by a pod? A) By including its data in the container image B) By mounting it as a volume or using it to populate environment variables C) Through node selectors D) By directly embedding it into the pod’s spec Answer: B Explanation: Pods can reference ConfigMaps by mounting them as volumes or by using them to set environment variables, enabling dynamic configuration. 90. Which of the following is a valid service type for exposing an application externally in Kubernetes? A) NodePort B) PodIP C) ClusterName D) VolumeClaim Answer: A Explanation: NodePort is a service type that opens a specific port on all nodes, allowing external access to the application. 91. What is the primary benefit of using network policies in Kubernetes? A) They improve persistent storage performance. B) They provide fine-grained control over pod-to-pod communication. C) They automatically scale deployments. D) They manage container images. Answer: B Explanation: Network policies allow administrators to define rules that control traffic between pods, enhancing security and isolation. 92. Which field in a pod spec would you modify to change the command that a container executes? A) imagePullPolicy B) command C) resources D) volumes
Answer: B Explanation: The command field in the container specification overrides the default entrypoint for the container image.
93. What does a Service of type ExternalName do in Kubernetes? A) It creates a load balancer for external traffic. B) It maps a service to an external DNS name. C) It exposes a pod directly to the internet. D) It creates a persistent volume. Answer: B Explanation: A Service of type ExternalName maps a service to an external DNS name, allowing internal cluster components to reference external resources. 94. How do you update a container image in a running Deployment? A) Use kubectl patch on the pod B) Edit the Deployment YAML and apply the changes C) Manually replace each pod D) Update the Service configuration Answer: B Explanation: Updating the container image in the Deployment YAML and then applying the changes triggers a rolling update, gradually replacing old pods with new ones. 95. Which command shows resource usage statistics for nodes and pods? A) kubectl stats B) kubectl top C) kubectl monitor D) kubectl usage Answer: B Explanation: “kubectl top” provides metrics such as CPU and memory usage for nodes and pods in the cluster. 96. What is the primary advantage of using a DaemonSet? A) It ensures that a pod runs on every node or a specific subset of nodes. B) It handles scheduled batch jobs. C) It exposes an application to external traffic. D) It manages persistent storage. Answer: A Explanation: DaemonSets are used to ensure that a particular pod is running on every node (or on nodes matching specific criteria), which is useful for cluster-wide services. 97. Which of the following best describes the use of a Secret in Kubernetes? A) It is used for storing non-sensitive configuration data. B) It is used to store sensitive data like passwords and tokens in an encoded format.
