Download LFS250 Kubernetes and Cloud Native Essentials Practice Exam and more Exams Technology in PDF only on Docsity!
Essentials Practice Exam
Question 1.Which component stores the entire cluster state in Kubernetes? A) kube-apiserver B) kube-scheduler C) etcd D) kube-controller-manager Answer: C Explanation: etcd is the distributed key‑value store that holds all configuration data and state for the cluster. Question 2.What is the primary function of the kube‑apiserver? A) Schedule Pods onto Nodes B) Persist cluster data C) Expose the Kubernetes API to clients D) Manage container runtime Answer: C Explanation: The kube‑apiserver validates and processes all REST requests, acting as the front‑end for the control plane. Question 3.Which control‑plane component is responsible for ensuring the desired number of pod replicas? A) kube‑scheduler B) kube‑controller‑manager C) kubelet D) etcd Answer: B
Essentials Practice Exam
Explanation: The replication controller (part of kube‑controller‑manager) monitors ReplicaSets and creates/deletes Pods to match the spec. Question 4.What does the kubelet run on each worker node? A) API server B) Scheduler C) Container runtime and pod management agent D) Ingress controller Answer: C Explanation: The kubelet communicates with the API server and ensures containers defined in Pods are running via the container runtime. Question 5.Which component provides network proxy services on each node? A) kube‑proxy B) kube‑scheduler C) etcd D) kube‑controller‑manager Answer: A Explanation: kube‑proxy implements Service abstraction rules, handling load‑balancing and network forwarding. Question 6.In Kubernetes, what is the smallest deployable unit? A) Service B) Deployment C) Pod D) Namespace
Essentials Practice Exam
D) DaemonSet Answer: B Explanation: A Service abstracts a group of Pods and provides a stable virtual IP and DNS entry. Question 10.Which Service type routes external traffic to a NodePort on each worker node? A) ClusterIP B) NodePort C) LoadBalancer D) ExternalName Answer: B Explanation: NodePort allocates a port on every node’s IP, forwarding traffic to the Service’s backing Pods. Question 11.What is the purpose of a Namespace in Kubernetes? A) Store container images B) Isolate resources for multi‑tenant environments C) Manage node labels D) Provide DNS resolution Answer: B Explanation: Namespaces partition cluster resources, allowing separate teams or environments to coexist. Question 12.Which file format is primarily used to declare Kubernetes resources? A) JSON only B) XML
Essentials Practice Exam
C) YAML
D) INI
Answer: C Explanation: YAML is the preferred, human‑readable format for Kubernetes manifests, though JSON is also accepted. Question 13.What does the kubectl command “kubectl get pods - o wide” display? A) Only pod names B) Detailed pod information including node name and IPs C) Pod logs D) Pod security policies Answer: B Explanation: The “-o wide” flag adds extra columns such as node, pod IP, and more. Question 14.Which command creates resources from a manifest file? A) kubectl apply - f B) kubectl delete - f C) kubectl edit D) kubectl describe Answer: A Explanation: “kubectl apply” reads the YAML/JSON file and creates or updates the resources declaratively. Question 15.How does the Kubernetes API server authenticate requests? A) Only via IP address filtering
Essentials Practice Exam
A) Defining network policies B) Allowing Kubernetes to interact with any compliant container runtime C) Managing persistent storage D) Scheduling Pods Answer: B Explanation: CRI abstracts the underlying runtime (containerd, CRI‑O, etc.) so the kubelet can manage containers uniformly. Question 19.Which of the following is a CRI‑compatible runtime? A) Docker Engine (legacy) B) containerd C) rkt (Rocket) D) LXC Answer: B Explanation: containerd implements the CRI and is the default runtime for many modern clusters. Question 20.What is the primary benefit of container immutability? A) Faster network throughput B) Predictable, repeatable deployments without drift C) Dynamic scaling of CPU cores D) Automatic secret rotation Answer: B Explanation: Immutable containers ensure the same image runs everywhere, eliminating configuration drift.
Essentials Practice Exam
Question 21.How does the kube‑scheduler decide where to place a Pod? A) Random selection of a node B) Filtering nodes that satisfy constraints, then scoring to pick the best C) Based on the node’s hostname alphabetical order D) By consulting the etcd leader only Answer: B Explanation: The scheduler first filters nodes that meet requirements (e.g., resources, taints) and then scores them to select the optimal node. Question 22.Which node label is automatically added by Kubernetes to indicate the OS? A) kubernetes.io/os B) node.kubernetes.io/os C) beta.kubernetes.io/os D) node.k8s.io/os Answer: C Explanation: The legacy label “beta.kubernetes.io/os” (and its stable counterpart) denotes the node’s operating system. Question 23.What feature enables a Pod to be scheduled on every node in a cluster? A) Deployment B) DaemonSet C) ReplicaSet D) Job Answer: B Explanation: A DaemonSet ensures that a copy of a Pod runs on each node (or a subset based on selectors).
Essentials Practice Exam
Explanation: Istio injects an Envoy proxy as a sidecar container to intercept and manage traffic. Question 27.What is the main purpose of a PersistentVolume (PV) in Kubernetes? A) Store container images B) Provide a cluster‑wide, abstracted storage resource C) Define network policies D) Manage pod replica counts Answer: B Explanation: PVs represent a piece of storage in the cluster that can be claimed by PVCs. Question 28.How does a PersistentVolumeClaim (PVC) relate to a PV? A) PVC creates a new PV automatically B) PVC is a request for storage that binds to a matching PV C) PVC defines network routes for storage traffic D) PVC is a backup of a PV Answer: B Explanation: A PVC specifies size, access mode, etc.; the control plane binds it to a suitable PV. Question 29.What specification standard defines how storage plugins integrate with Kubernetes? A) CNI B) CSI C) CRI D) OCI Answer: B
Essentials Practice Exam
Explanation: The Container Storage Interface (CSI) provides a vendor‑agnostic way to expose storage systems to Kubernetes. Question 30.Which CNI plugin is known for providing a simple overlay network using VXLAN? A) Calico B) Flannel C) Weave Net D) Cilium Answer: B Explanation: Flannel commonly uses a VXLAN overlay to give each pod its own IP address across nodes. Question 31.What type of Kubernetes Service enables HTTP(S) routing based on host/path rules? A) ClusterIP B) NodePort C) LoadBalancer D. Ingress Answer: D Explanation: Ingress resources define external HTTP(S) routing rules and rely on an Ingress controller. Question 32.What does the “4C’s of Cloud Native Security” stand for? A) Confidentiality, Compliance, Control, Continuity B) Container, Compute, Cluster, Cloud C) Credential, Communication, Configuration, Code
Essentials Practice Exam
C) Both A and B D) Service Answer: B Explanation: Ingress network policies specify which sources may send traffic to the selected Pods. Question 36.What is a key characteristic of cloud‑native applications? A) Monolithic architecture B) Immutable infrastructure and declarative APIs C) Manual scaling only D) Single‑tenant deployments only Answer: B Explanation: Cloud‑native emphasizes containers, microservices, immutable builds, and declarative management. Question 37.What does “immutable infrastructure” imply? A) Servers are never rebooted B) Once deployed, components are never changed; updates are done by replacement C) All configuration files are read‑only D) Pods cannot be terminated Answer: B Explanation: Immutable infrastructure means you replace whole units (e.g., images, Pods) rather than patching them in place. Question 38.What is the primary advantage of serverless (FaaS) in cloud native environments? A) Direct VM access
Essentials Practice Exam
B) Automatic scaling per request without managing servers C) Persistent storage on each function instance D) Manual deployment of containers Answer: B Explanation: Serverless abstracts the underlying compute, scaling functions automatically based on demand. Question 39.Which CNCF project enables building, deploying, and managing serverless workloads on Kubernetes? A) Prometheus B) Knative C) Helm D) Envoy Answer: B Explanation: Knative provides building blocks for serverless, including serving and eventing on top of Kubernetes. Question 40.What are the three maturity levels defined by CNCF for projects? A) Alpha, Beta, Stable B) Sandbox, Incubating, Graduated C) Prototype, Production, Enterprise D) Draft, Review, Final Answer: B Explanation: CNCF classifies projects as Sandbox (early), Incubating (maturing), or Graduated (stable, widely adopted).
Essentials Practice Exam
Question 44.Which open‑source system is widely used for time‑series metrics collection in Kubernetes? A) ELK Stack B) Jaeger C) Prometheus D) Grafana Loki Answer: C Explanation: Prometheus scrapes metrics endpoints and stores them as time‑series data. Question 45.What component in Prometheus is responsible for evaluating alerting rules? A) Prometheus server B) Alertmanager C) Pushgateway D) Thanos Answer: B Explanation: Alertmanager receives alerts from Prometheus and handles silencing, inhibition, and routing. Question 46.Which Kubernetes label is automatically added to indicate the node’s architecture? A) beta.kubernetes.io/arch B) kubernetes.io/arch C) node.k8s.io/arch D) architecture.k8s.io Answer: A
Essentials Practice Exam
Explanation: The legacy label “beta.kubernetes.io/arch” identifies the CPU architecture (amd64, arm64, etc.). Question 47.What does “GitOps” emphasize for Kubernetes deployments? A) Manual editing of manifests on the cluster B) Storing the entire desired state in a Git repository and automating sync C) Using Git branches for each node D) Running Git commands inside containers Answer: B Explanation: GitOps treats Git as the single source of truth, with operators continuously reconciling the cluster to match the repo. Question 48.Which tool provides declarative continuous delivery for Kubernetes using Git as the source? A) Jenkins B) Argo CD C) Terraform D) Ansible Answer: B Explanation: Argo CD monitors Git repositories and applies changes to the cluster automatically. Question 49.What is a “Rolling Update” deployment strategy? A) Deploy new version to all Pods simultaneously B) Replace old Pods with new ones gradually, maintaining availability C) Deploy new version only after shutting down the entire service D) Duplicate the entire cluster before updating
Essentials Practice Exam
D) Deploy new namespaces automatically Answer: B Explanation: HPA watches metrics and changes the replica count of a Deployment, ReplicaSet, or StatefulSet. Question 53.How does “Cluster Autoscaler” differ from HPA? A) It scales the number of nodes in the cluster, not pods B) It only works on on‑prem clusters C) It scales storage volumes D) It replaces the kube‑scheduler Answer: A Explanation: Cluster Autoscaler adds or removes nodes based on pending pod scheduling needs. Question 54.What is a “StatefulSet” primarily used for? A) Stateless web front‑ends B) Applications that require stable network IDs and persistent storage (e.g., databases) C) Batch jobs only D) Daemon processes on each node Answer: B Explanation: StatefulSets give each Pod a stable hostname and ordered deployment, useful for stateful workloads. Question 55.Which Kubernetes object defines a set of Pods that should run a specific number of times, then finish? A) Job
Essentials Practice Exam
B) CronJob C) Deployment D) DaemonSet Answer: A Explanation: A Job creates Pods that run to completion, ensuring a specified count succeeds. Question 56.What does a “CronJob” add to the basic Job resource? A) Ability to run jobs on a recurring schedule (cron syntax) B) Automatic scaling of pods C) Persistent storage binding D) Network policy enforcement Answer: A Explanation: CronJob schedules Jobs to run at defined times, similar to Unix cron. Question 57.Which of the following best describes a “Sidecar” container pattern? A) A container that runs a separate unrelated workload B) An auxiliary container in the same Pod that extends or supports the main container (e.g., logging, proxy) C) A container that replaces the main application during upgrades D) A container that runs only on master nodes Answer: B Explanation: The sidecar runs alongside the primary container, sharing the Pod’s network and storage, providing additional capabilities. Question 58.What is the purpose of “Kustomize” in the Kubernetes ecosystem?
