CKAD Practice Test 22 — 15 Questions

Question 1

Which command shows the CPU and memory usage of all pods in the current namespace?

Accepted Answer

kubectl top pod. `kubectl top pod` without a specific pod name retrieves CPU and memory usage metrics for all pods in the current namespace, as the command defaults to listing all pods when no pod name is provided. This relies on the metrics-server collecting resource usage data from the kubelet's cAdvisor endpoint via the Resource Metrics API.

Answer

kubectl top node

Answer

kubectl top --all

Answer

kubectl top pod pod-name

Question 2

What is the correct apiVersion for a Kubernetes Job in v1.29?

Accepted Answer

batch/v1. Kubernetes Jobs are part of the batch API group, and starting from Kubernetes v1.21, the batch/v1 API version is stable and the only supported version for Jobs. In v1.29, batch/v1beta1 has been removed, so batch/v1 is the correct and required apiVersion.

Answer

batch/v1beta1

Answer

apps/v1

Answer

v1

Question 3

A namespace 'test' has a LimitRange that sets default memory request to 256Mi and default memory limit to 512Mi. A pod in that namespace does not specify any resources. What memory request and limit will the pod get?

Accepted Answer

request: 256Mi, limit: 512Mi. When a LimitRange exists in a namespace with default memory request and limit values, any pod that does not specify resource requests or limits will automatically have those defaults injected by the admission controller. This ensures the pod is subject to resource constraints even without explicit specification.

Answer

request: 0, limit: 0 (none)

Answer

request: 512Mi, limit: 256Mi

Answer

request: 256Mi, limit: 256Mi

Question 4

Which command creates a generic Secret with username=admin and password=secret123?

Accepted Answer

kubectl create secret generic mysecret --from-literal=username=admin --from-literal=password=secret123. `kubectl create secret generic` with `--from-literal` allows you to specify key-value pairs directly on the command line, creating a generic (opaque) Secret with the literal values `username=admin` and `password=secret123`. This is the standard way to create a generic Secret from literal data.

Answer

kubectl create secret tls mysecret --from-literal=username=admin --from-literal=password=secret123

Answer

kubectl create secret generic mysecret --from-env-file=username=admin,password=secret123

Answer

kubectl create secret generic mysecret --from-file=username=admin --from-file=password=secret123

Question 5

A StatefulSet named 'web' is created with 3 replicas. What is the DNS name for the second pod (index 1)?

Accepted Answer

web-1.web.default.svc.cluster.local. In Kubernetes, a StatefulSet creates pods with a stable, ordinal hostname based on the pattern `-`. The second pod (index 1) is named `web-1`. When a headless Service (named `web`) is associated with the StatefulSet, each pod gets a DNS A record in the form `...svc.cluster.local`. Therefore, the correct DNS name is `web-1.web.default.svc.cluster.local`.

Answer

web-2.web.default.svc.cluster.local

Answer

web.default.svc.cluster.local

Answer

web-1.default.svc.cluster.local

Question 6

In a Deployment, what is the purpose of the 'maxUnavailable' field in the rolling update strategy?

Accepted Answer

The maximum number of pods that can be unavailable during the update.. In a Deployment's rolling update strategy, the 'maxUnavailable' field specifies the maximum number of Pods that can be unavailable during the update process. This ensures that the Deployment maintains a certain level of availability by controlling how many Pods can be taken down at any given time, relative to the desired replica count. It is defined as either an absolute number or a percentage of the desired Pods, and it works alongside 'maxSurge' to manage the update's pace and safety.

Answer

The maximum number of pods that can be terminated at once.

Answer

The maximum time allowed for the rollout to complete.

Answer

The maximum number of pods that can be created above the desired replicas.

Question 7

Which Helm command is used to install a chart from a repository?

Accepted Answer

helm install myrelease stable/nginx. `helm install myrelease stable/nginx` installs a chart named 'nginx' from the 'stable' repository, creating a release named 'myrelease'. This command requires the chart reference to include the repository alias (e.g., 'stable/nginx') after the repository has been added with `helm repo add`.

Answer

helm repo add stable https://charts.helm.sh/stable

Answer

helm create mychart

Answer

helm upgrade myrelease stable/nginx

Question 8

Which TWO of the following are correct about the ExternalName Service type?

Accepted Answer

It maps a Service to a DNS name, not to pods. An ExternalName Service maps a Service to an external DNS name (e.g., `my-service.default.svc.cluster.local` resolves to `api.example.com`) rather than to a set of pods. It does not use selectors or endpoints; instead, it returns a CNAME record pointing to the external name, enabling in-cluster clients to access external services via a stable Kubernetes Service DNS name.

Answer

It provides load balancing across pods

Answer

It selects pods using a label selector

Answer

It requires a cloud provider load balancer

Question 9

You need to create a ConfigMap named 'app-config' with key 'APP_COLOR' and value 'blue'. Which command creates this ConfigMap?

Accepted Answer

kubectl create configmap app-config --from-literal=APP_COLOR=blue. `kubectl create configmap app-config --from-literal=APP_COLOR=blue` uses the `--from-literal` flag, which directly creates a ConfigMap entry from a key-value pair specified in the command line. The syntax `key=value` is required for literal data, and this command correctly maps the key 'APP_COLOR' to the value 'blue'.

Answer

kubectl create configmap app-config --from-env-file=APP_COLOR=blue

Answer

kubectl create configmap app-config --from-literal=APP_COLOR:blue

Answer

kubectl create configmap app-config --from-file=APP_COLOR=blue

Question 10

A developer is deploying a web application that requires 2 GiB of memory and 0.5 CPU cores. The cluster nodes have 4 GiB of memory and 2 CPU cores each. The developer wants to ensure the pod gets guaranteed QoS class. Which resource specification should be used?

Accepted Answer

requests: memory: 2Gi, cpu: 500m; limits: memory: 2Gi, cpu: 500m. For a pod to receive the Guaranteed QoS class, every container in the pod must have both resource requests and limits set, and the requests must equal the limits for each resource (memory and CPU). This configuration ensures the pod is not overcommitted and gets the highest priority under resource pressure.

Answer

requests: memory: 2Gi, cpu: 500m; no limits

Answer

requests: memory: 2Gi, cpu: 500m; limits: memory: 4Gi, cpu: 1

Answer

requests: memory: 1Gi, cpu: 250m; limits: memory: 2Gi, cpu: 500m

Question 11

You want to expose a container's port 8080 in the Dockerfile. Which instruction should you use?

Accepted Answer

EXPOSE 8080. The `EXPOSE` instruction in a Dockerfile informs Docker that the container listens on the specified network port at runtime. It is a metadata declaration that does not actually publish the port; it serves documentation and inter-container communication purposes via Docker networks.

Answer

PORT 8080

Answer

LISTEN 8080

Answer

PUBLISH 8080

Question 12

A StatefulSet is deployed with a headless service (clusterIP: None). The pods are named 'web-0', 'web-1', 'web-2'. What DNS name resolves to the specific IP of 'web-1'?

Accepted Answer

web-1.web.default.svc.cluster.local. A is correct because in a StatefulSet with a headless service (clusterIP: None), each pod gets a unique DNS name following the pattern `...svc.cluster.local`. For pod 'web-1' in the default namespace, this resolves to the pod's specific IP address via a DNS A record, not a service VIP.

Answer

web-1.default.svc.cluster.local

Answer

web-0.web.default.svc.cluster.local

Answer

web.web-1.default.svc.cluster.local

Question 13

You create a Service with `kubectl expose deployment web --port=80 --target-port=8080`. What type of Service is created by default?

Accepted Answer

ClusterIP. When you run `kubectl expose deployment web --port=80 --target-port=8080` without specifying the `--type` flag, Kubernetes defaults to creating a Service of type ClusterIP. This is because ClusterIP is the default Service type in Kubernetes, providing internal cluster-only access to the pods via a stable virtual IP address.

Answer

LoadBalancer

Answer

NodePort

Answer

ExternalName

Question 14

You have a Service named 'myservice' in namespace 'default'. A pod in the same cluster but different namespace 'other' wants to resolve the service's IP. What DNS name should it use?

Accepted Answer

myservice.default.svc.cluster.local. Kubernetes DNS resolves services using the format `..svc.cluster.local`. Since the service 'myservice' is in the 'default' namespace, a pod in the 'other' namespace must include the namespace in the DNS name to reach it. This fully qualified domain name (FQDN) ensures the DNS query resolves to the service's cluster IP, regardless of the pod's namespace.

Answer

default.myservice.svc.cluster.local

Answer

myservice.svc.cluster.local

Answer

myservice.other.svc.cluster.local

Question 15

Which of the following is the correct apiVersion for a CronJob in Kubernetes v1.29?

Accepted Answer

batch/v1. In Kubernetes v1.29, the correct apiVersion for a CronJob is batch/v1, as CronJob has been stable since v1.21. Option D is correct because batch/v1 is the stable API version for CronJob resources in this release.

Answer

v1

Answer

cronjob/v1

Answer

batch/v1beta1