CKA Practice Test 30 — 15 Questions

Question 1

A CSI driver is installed in the cluster, but a PersistentVolumeClaim using a StorageClass that references this driver remains Pending. The administrator checks the logs of the CSI controller pod and sees no errors. What is a possible cause?

Accepted Answer

The StorageClass volumeBindingMode is set to WaitForFirstConsumer.. If the volumeBindingMode is set to WaitForFirstConsumer, the PV will not be provisioned until a pod using the PVC is scheduled. This is a common pitfall. The CSI driver may be working fine, but the binding mode delays provisioning.

Answer

The CSI driver is not registered correctly.

Answer

The StorageClass volumeBindingMode is set to Immediate.

Answer

The PVC requests a size that is not available.

Question 2

An administrator creates a PersistentVolume named 'pv-nfs' with a reclaim policy of 'Retain'. After a user deletes the PVC bound to this PV, what state does the PV enter?

Accepted Answer

Released. When the reclaim policy is Retain, the PV remains in Released state after the PVC is deleted. The data is preserved but the PV is not available for reuse until manually reclaimed.

Answer

Available

Answer

Failed

Answer

Bound

Question 3

A StatefulSet named 'web' uses volumeClaimTemplates to create PVCs for each replica. You scale the StatefulSet from 3 to 5 replicas. What happens to the PVCs?

Accepted Answer

New PVCs are created for the new replicas (web-3 and web-4).. When scaling up, StatefulSet creates new PVCs (with names like web-3, web-4) based on the template. Scaling down does not delete PVCs automatically.

Answer

All PVCs are deleted and recreated.

Answer

The PVCs are not created; you must create them manually.

Answer

Existing PVCs are reused for the new replicas.

Question 4

What is the default reclaim policy for a PersistentVolume?

Accepted Answer

Retain. The default reclaim policy for a PV is 'Retain', meaning it is not automatically deleted or recycled.

Answer

Recycle

Answer

None

Answer

Delete

Question 5

Which TWO of the following volume types are typically used for sharing data between containers in the same pod?

Accepted Answer

hostPath. emptyDir and hostPath can be used for sharing data between containers in a pod. ConfigMap and Secret are for configuration, not general data sharing. NFS is a network volume typically used across pods.

Answer

configMap

Answer

nfs

Answer

secret

Question 6

Which volume type in Kubernetes allows a Pod to share data between its containers, with the data being deleted when the Pod is removed?

Accepted Answer

emptyDir. emptyDir volumes are created when a Pod is assigned to a node and exist as long as that Pod is running. They are initially empty and allow containers in the same Pod to share data. When the Pod is deleted, the emptyDir is deleted permanently. hostPath persists beyond Pod lifecycle, configMap and secret are used for configuration data, not for sharing data between containers in a transient manner.

Answer

hostPath

Answer

configMap

Answer

secret

Question 7

A Pod is configured with a volume that uses a ConfigMap. The ConfigMap is updated after the Pod is running. How can the Pod access the updated data without restarting?

Accepted Answer

The Pod will automatically see the updated data within minutes.. When a ConfigMap is mounted as a volume using subPath, updates are not automatically reflected. However, if the volume uses the entire ConfigMap (not subPath), the files are updated automatically after a delay (kubelet sync period). If subPath is used, the Pod must be restarted to pick up changes. The question implies a volume mount, not subPath, so the updates are eventually reflected without restart. But to force immediate update, the Pod can be restarted. The best answer: The Pod will automatically receive updates after the kubelet syncs (usually within minutes). So no action is needed, but the Pod may need to be restarted if using subPath. Since the question does not mention subPath, the default behavior is that the mounted ConfigMap is updated automatically. However, the correct answer among options is that the Pod will automatically see the updated data after the kubelet sync period.

Answer

The ConfigMap must be deleted and recreated.

Answer

The Node must be rebooted.

Answer

The Pod must be deleted and recreated.

Question 8

Which THREE statements about StorageClasses are true?

Accepted Answer

A StorageClass can specify a provisioner to enable dynamic volume provisioning.. StorageClasses define a provisioner for dynamic provisioning (A), can set the reclaim policy (B), and can have volumeBindingMode set to WaitForFirstConsumer (C). They are not restricted to cluster admins only; users can create them if RBAC allows (D is false). StorageClasses are cluster-scoped (E is false).

Answer

Only cluster administrators can create StorageClasses.

Answer

StorageClasses are namespaced resources.

Question 9

An admin runs: kubectl edit pvc my-pvc --namespace=default and changes spec.resources.requests.storage from 10Gi to 20Gi. The PVC's StorageClass has allowVolumeExpansion: true. What else is required for the expansion to take effect?

Accepted Answer

The pod using the PVC must be restarted to detect the new size. Option B is correct: After editing the PVC, the expansion happens automatically in the background, but the pod must be restarted to recognize the new size (unless the filesystem supports online resizing). Option A is incorrect because recreating the pod is not necessary; a restart suffices. Option C is incorrect because no CSI driver update is needed. Option D is incorrect; the PVC status will update after expansion.

Answer

The pod using the PVC must be deleted and recreated

Answer

No further action is needed; the PVC size will update immediately

Answer

The CSI driver must be updated to support expansion

Question 10

Which TWO of the following are required for dynamic provisioning of PersistentVolumes using a StorageClass?

Accepted Answer

A PersistentVolumeClaim that references the StorageClass. Options A and D are correct: A StorageClass must reference a provisioner (e.g., kubernetes.io/aws-ebs), and a PVC must reference that StorageClass to trigger dynamic provisioning. Option B is not required; allowVolumeExpansion is optional. Option C is not required; volumeBindingMode defaults to Immediate. Option E is not required; a default StorageClass is optional.

Answer

A StorageClass with allowVolumeExpansion: true

Answer

A StorageClass with volumeBindingMode: WaitForFirstConsumer

Answer

A default StorageClass must be defined

Question 11

Which of the following volume types is designed to store sensitive information such as passwords or tokens?

Accepted Answer

secret. Secrets are Kubernetes objects designed to hold sensitive data. They can be mounted as volumes into pods.

Answer

emptyDir

Answer

hostPath

Answer

configMap

Question 12

Which THREE of the following are valid ways to provide storage to a pod in Kubernetes? (Select three.)

Accepted Answer

hostPath. PersistentVolumeClaim, emptyDir, and hostPath are all valid volume sources. configMap and secret are also valid, but they are for configuration data, not general storage. However, the question asks for 'storage' broadly. Typically, these are considered storage options. But to align with common exam topics, I'll include configMap as a valid volume type. Actually, configMap is a volume type that provides configuration data, not general storage. I'll adjust: correct answers are PVC, emptyDir, hostPath. ConfigMap and secret are also volume types, but they are for specific purposes. I'll stick with PVC, emptyDir, hostPath as the most direct storage options.

Answer

secret

Answer

configMap

Question 13

A StorageClass named 'fast-ssd' uses the provisioner 'kubernetes.io/gce-pd' and has volumeBindingMode: WaitForFirstConsumer. A PVC 'my-pvc' requests 100Gi storage from this StorageClass. A pod using the PVC is scheduled to a node in zone 'us-central1-a'. When is the PV provisioned?

Accepted Answer

When the pod is scheduled to a node. With WaitForFirstConsumer, volume binding and provisioning are delayed until a pod using the PVC is scheduled. The PV is provisioned after the pod is scheduled to a node.

Answer

Immediately when the PVC is created

Answer

When the pod starts running

Answer

The PV is never provisioned automatically; it must be pre-created

Question 14

A developer creates a PVC with storageClassName: "" (empty string). What does this mean?

Accepted Answer

The PVC will only bind to PVs that also have storageClassName: "". An empty string for storageClassName means that the PVC will only bind to pre-existing PVs that also have storageClassName: "" (i.e., no StorageClass). It disables dynamic provisioning.

Answer

The PVC will remain pending indefinitely

Answer

The PVC will use the default StorageClass

Answer

The PVC will be dynamically provisioned using the cluster's default StorageClass

Question 15

A StatefulSet named 'web' is defined with a volumeClaimTemplate. The StatefulSet has replicas: 3. The volumeClaimTemplate specifies storage: 1Gi and storageClassName: 'ssd'. After the StatefulSet is created, you run 'kubectl get pvc' and see three PVCs named 'www-web-0', 'www-web-1', and 'www-web-2'. What is the name of the PersistentVolumeClaim template used in the StatefulSet?

Accepted Answer

www. In a StatefulSet volumeClaimTemplate, the PVCs are named as --. The observed PVCs are 'www-web-0', 'www-web-1', 'www-web-2'. The pattern: the template name is 'www', the StatefulSet name is 'web', and the ordinals are 0,1,2. So the template name is 'www'.

Answer

web-www

Answer

web

Answer

ssd