CKAD Practice Test 26 — 15 Questions

Question 1

Which TWO of the following are valid service types in Kubernetes?

Accepted Answer

NodePort. NodePort is a valid Kubernetes service type that exposes a service on a static port on each node's IP address, allowing external traffic to reach the service. It builds on top of ClusterIP by creating a cluster-wide port mapping that forwards traffic from the node's port to the service's ClusterIP and target port.

Answer

Headless

Answer

Ingress

Answer

Gateway

Question 2

Which TWO of the following are valid Ingress path types? (Select 2)

Accepted Answer

Exact. In Kubernetes Ingress, the `spec.rules.http.paths[].pathType` field supports two valid types: `Exact` and `Prefix`. `Exact` matches the URL path exactly, case-sensitive, and is used when you need a precise match without any wildcard or prefix behavior.

Answer

Glob

Answer

Wildcard

Answer

Regex

Question 3

Which THREE of the following are valid fields in a Helm chart's values.yaml file that can be used in templates?

Accepted Answer

replicaCount: 3. `replicaCount: 3` is a standard top-level key in a Helm chart's `values.yaml` file. This file contains plain YAML key-value pairs that are injected into templates via the `.Values` object (e.g., `{{ .Values.replicaCount }}`). It is not a template directive itself, but a data source for templates.

Answer

Answer

Question 4

Which TWO are correct about LimitRange?

Accepted Answer

LimitRange can set default resource requests for containers that don't specify them. A LimitRange can define default resource requests and limits for containers in a namespace. When a container is created without specifying resource requests or limits, the LimitRange admission controller automatically applies the default values defined in the LimitRange object. This ensures that containers have baseline resource guarantees even if the pod spec omits them.

Answer

LimitRange can be applied only to pods in the default namespace

Answer

LimitRange is a cluster-scoped resource

Answer

LimitRange can enforce quotas on total resource usage across all pods

Question 5

Which TWO commands can be used to view the logs of a pod that has crashed?

Accepted Answer

kubectl logs --previous. `kubectl logs --previous` retrieves logs from the previous instance of a container in a pod that has crashed and been restarted. This is essential for debugging crash loops, as the current container may have no logs or only post-crash output. The `--previous` flag accesses the terminated container's logs stored by the kubelet.

Answer

kubectl logs <pod> --tail=0 -f

Answer

kubectl logs -c

Answer

kubectl logs <pod>

Question 6

Which TWO statements about Kubernetes Services are correct?

Accepted Answer

A Service provides a stable IP address and DNS name for a set of pods.. A Kubernetes Service provides a stable virtual IP address and a DNS name (via CoreDNS) that remains constant even as the underlying pods are created, destroyed, or scaled. This abstraction decouples clients from the ephemeral nature of pod IPs, ensuring reliable service discovery within the cluster.

Answer

A ClusterIP service is accessible from outside the cluster.

Answer

A Service can load balance traffic across multiple clusters.

Answer

A headless service assigns a ClusterIP to the service.

Question 7

Which THREE are valid fields in a NetworkPolicy spec? (Choose three.)

Accepted Answer

podSelector. `podSelector` is a required field in a NetworkPolicy spec that defines which pods the policy applies to, using standard Kubernetes label selectors. It must be present to target specific pods within a namespace, and an empty `podSelector` selects all pods in the namespace.

Answer

ports

Answer

ipBlock

Question 8

You have a Deployment named 'web-app' with 5 replicas. You want to perform a rolling update with a maximum of 2 extra pods during the update and allow at most 1 pod to be unavailable. Which YAML snippet correctly configures the rolling update strategy?

Accepted Answer

strategy:
  type: RollingUpdate
  rollingUpdate:
    maxSurge: 2
    maxUnavailable: 1. Ly sets maxSurge to 2 and maxUnavailable to 1. maxSurge: 2 allows up to 2 extra pods above the desired 5 replicas (total 7). maxUnavailable: 1 ensures at most 1 pod is unavailable during the update, meeting the requirement of allowing at most 1 unavailable pod.

Answer

strategy:
  type: RollingUpdate
  rollingUpdate:
    maxSurge: 3
    maxUnavailable: 0

Answer

strategy:
  type: RollingUpdate
  rollingUpdate:
    maxSurge: 1
    maxUnavailable: 2

Answer

strategy:
  type: RollingUpdate
  rollingUpdate:
    maxSurge: "50%"
    maxUnavailable: "20%"

Question 9

Which THREE of the following are valid fields in a Pod's container spec for resource management? (Choose three.)

Accepted Answer

resources.limits.ephemeral-storage. `ephemeral-storage` is a valid resource type in Kubernetes that can be specified under `resources.limits` to control the maximum temporary storage a container can use, preventing pods from exhausting node storage. This is defined in the Kubernetes resource model and is commonly used for scratch space or logs.

Answer

resources.requests.gpu

Answer

resources.requests.storage

Question 10

You want to add an annotation to a pod without modifying the pod template. Which approach should you use?

Accepted Answer

kubectl annotate pod my-pod key=value. 'kubectl annotate pod my-pod key=value' adds an annotation directly to the existing pod without modifying the pod template. Option A uses 'kubectl annotate deployment', which adds an annotation to the Deployment object itself, not to the pod. Option B uses 'kubectl label', which adds labels, not annotations. Option C uses 'kubectl edit', which is not a direct annotation command and may be less efficient.

Answer

kubectl annotate deployment my-deployment key=value

Answer

kubectl label pod my-pod key=value

Answer

kubectl edit pod my-pod and add annotation manually

Question 11

A container in a pod is expected to shut down gracefully within 30 seconds when it receives SIGTERM. How should you configure the pod to ensure the container is given enough time to shut down before being forcefully killed?

Accepted Answer

Set spec.terminationGracePeriodSeconds: 35. terminationGracePeriodSeconds defines the time Kubernetes waits after sending SIGTERM before sending SIGKILL. Setting it to 35 seconds gives the container a 5-second buffer beyond the expected 30-second shutdown time. Option B is correct because 35 seconds provides sufficient time without being excessive. Option A uses an invalid field name (terminationGracePeriod instead of terminationGracePeriodSeconds). Option C sets the grace period to 300 seconds, which is excessively long and could delay pod termination. Option D sets the grace period to 20 seconds, which is too short and may not allow the container to shut down gracefully within the expected 30 seconds.

Answer

Set spec.terminationGracePeriod: 35

Answer

Set spec.terminationGracePeriodSeconds: 300

Answer

Set spec.terminationGracePeriodSeconds: 20

Question 12

You are using Helm to manage a chart. Which commands are valid to list installed releases? (Choose TWO)

Accepted Answer

helm ls. `helm ls` and `helm list` are both valid commands to list installed releases in Helm. `helm ls` is an alias for `helm list`, and both display all deployed releases in the current namespace by default. These commands are essential for managing Helm-based deployments.

Answer

helm upgrade

Answer

helm status

Answer

helm history

Question 13

Which service type is used to expose a service using an external DNS name, such as a database hosted outside Kubernetes?

Accepted Answer

ExternalName. ExternalName is the correct service type because it maps a Kubernetes service to an external DNS name (e.g., a database hosted outside the cluster) by returning a CNAME record with that external name. This allows pods to access the external resource using the service's DNS name without needing to know the external endpoint's IP address.

Answer

ClusterIP

Answer

NodePort

Answer

LoadBalancer

Question 14

You have a Helm chart for an application. After running 'helm install my-release ./mychart', you realize you forgot to set a required value. Which command can you use to update the release with the correct value while keeping the same chart version?

Accepted Answer

helm upgrade my-release ./mychart --set key=value. Helm upgrade modifies a release with new values or chart changes. The --set flag overrides values inline.

Answer

kubectl edit deployment my-release

Answer

helm install my-release ./mychart --set key=value

Answer

helm rollback my-release 1

Question 15

You have a multi-stage Dockerfile with two stages: 'builder' and 'runtime'. You want to copy artifacts from the builder stage to the runtime stage. Which Dockerfile instruction achieves this?

Accepted Answer

COPY --from=builder /app/artifact /app/. The COPY instruction with --from=stage-name copies files from a previous build stage.

Answer

EXPORT builder /app/artifact /app/

Answer

ADD --from=builder /app/artifact /app/

Answer

COPY ../builder/artifact /app/