CKAD Application Design and Build Practice Test 10 — 15 Questions

Question 1

You need to run a batch job that processes a queue and must ensure exactly 5 pods run successfully in parallel. Which Job configuration field should be set?

Accepted Answer

spec.parallelism: 5. The 'parallelism' field specifies how many pods can run concurrently. 'completions' is for total successful pod completions.

Answer

spec.backoffLimit: 5

Answer

spec.ttlSecondsAfterFinished: 5

Answer

spec.completions: 5

Question 2

A CronJob is configured with 'concurrencyPolicy: Forbid'. What happens if the scheduled time arrives while the previous job is still running?

Accepted Answer

The new job is skipped until the next scheduled time. With 'Forbid', if a job is still running, the new scheduled job is skipped (does not run).

Answer

The new job starts immediately, running concurrently

Answer

The running job is terminated and the new job starts

Answer

The CronJob enters an error state

Question 3

Consider the following partial Dockerfile:
FROM alpine:3.18 AS builder
RUN apk add --no-cache curl
COPY src /app/src
RUN make /app/bin

FROM alpine:3.18
COPY --from=builder /app/bin /app/bin
CMD ["/app/bin"]
What is the primary benefit of this multi-stage build?

Accepted Answer

Reduced final image size by excluding build dependencies. Multi-stage builds allow copying only the compiled binary from the builder stage, leaving behind build tools and intermediate files, resulting in a smaller final image.

Answer

Faster builds because the builder stage runs in parallel

Answer

Automatic caching of the builder stage

Answer

Improved security by running the builder as a non-root user

Question 4

A pod named 'app' has a container that logs to stdout. You want to add a sidecar container that streams these logs to a centralized logging service. Which pattern does this represent?

Accepted Answer

Sidecar pattern. A sidecar container that enhances the primary container (e.g., log shipper) is a classic sidecar pattern.

Answer

Ambassador pattern

Answer

Adapter pattern

Answer

Init container pattern

Question 5

Which kubectl command creates a deployment named 'web' from the image 'nginx:1.25' and exposes it on port 80?

Accepted Answer

kubectl create deployment web --image=nginx:1.25. The 'kubectl create deployment' command creates a deployment, then 'kubectl expose' creates a service. However, among the options, the correct one is the command that creates the deployment only. The question asks for a command that creates a deployment and exposes it. The best match is using 'kubectl run' with --port, which creates a pod, not a deployment. So the intended correct answer is the deployment creation command, but exposure is separate. The correct answer should be 'kubectl create deployment web --image=nginx:1.25' and then expose separately. Among the given options, the one that creates a deployment is correct.

Answer

kubectl create deployment web --image=nginx:1.25 --expose

Answer

kubectl apply -f deployment.yaml

Answer

kubectl run web --image=nginx:1.25 --port=80

Question 6

You have a YAML file for a Job named 'data-processor' with 'spec.backoffLimit: 4'. After 3 retries, one pod fails. How many more retries will Kubernetes attempt on that pod?

Accepted Answer

1 retry. backoffLimit limits the total number of retries across all pods. The job's pod will be retried up to backoffLimit times, including the initial attempt. So after 3 retries (i.e., 4 attempts total? Actually careful: backoffLimit specifies the number of retries before marking the Job as failed. The initial attempt is not a retry. So backoffLimit=4 means up to 4 retries. After 3 retries, one more retry is allowed. But the question says 'after 3 retries', meaning 3 retries have already occurred. So one more is allowed. However, the options should reflect that.

Answer

0 retries; the job is marked as failed

Answer

Unlimited retries until success

Answer

4 retries

Question 7

A pod with an init container and a main container has 'restartPolicy: Always'. The init container exits with code 0. What happens next?

Accepted Answer

The main container starts; if it fails, it will be restarted. Init containers run to completion and are not restarted. The main container starts and runs. If the main container exits, it will be restarted due to restartPolicy Always.

Answer

The pod enters CrashLoopBackOff because the init container should not exit

Answer

The pod is considered complete and enters Succeeded phase

Answer

The init container restarts and runs again

Question 8

Which of the following is a valid schedule for a CronJob that runs every day at midnight?

Accepted Answer

0 0 * * *. Cron schedule format: minute hour day month weekday. '0 0 * * *' means at minute 0 of hour 0 every day.

Answer

0 0 1 * *

Answer

* * * * *

Answer

0 * * * *

Question 9

You run 'kubectl run debug-pod --image=busybox -it --restart=Never -- sh' but the pod starts and immediately exits. You want to keep the container running to execute commands later. What flag should you add?

Accepted Answer

-- sleep infinity. The '--' and 'sh' run a shell that exits when stdin is closed. To keep it running, use 'sleep infinity' or a 'while' loop. The simplest is to change the command to 'sleep infinity'.

Answer

--stdin=true

Answer

--command

Answer

--attach

Question 10

Which TWO statements about the .dockerignore file are true?

Accepted Answer

It supports pattern matching similar to .gitignore. .dockerignore excludes files from the build context, reducing build time and preventing secrets from being copied.

Answer

It is automatically applied to all docker commands

Answer

It can be used to specify which Dockerfile to use

Answer

It can override the base image from the Dockerfile

Question 11

Which THREE of the following are valid patterns for multi-container pods?

Accepted Answer

Ambassador. Sidecar, ambassador, and adapter are well-known multi-container patterns.

Answer

Init

Answer

Daemon

Question 12

You are given a pod YAML that uses an init container to wait for a database. The init container exits with code 0, but the main container crashes. Which TWO fields in the pod spec directly affect the behavior of the main container after it crashes?

Accepted Answer

spec.restartPolicy. restartPolicy controls whether the main container is restarted; livenessProbe checks health and can restart the container; readinessProbe does not restart.

Answer

spec.containers[0].readinessProbe

Answer

spec.initContainers[0].restartPolicy

Answer

spec.containers[0].command

Question 13

A pod in the 'production' namespace is in a CrashLoopBackOff state. The pod has been running successfully for several days. You run 'kubectl describe pod app-pod -n production' and see the message: 'OOMKilled'. What is the MOST appropriate action to resolve this issue?

Accepted Answer

Increase the memory limit in the pod's container resource specification. Option B is correct. OOMKilled means the container exceeded its memory limit and was killed by the kernel OOM killer. The solution is to increase the memory limit in the container's resource specification. Option A would not help — restarting the pod without addressing the root cause will result in the same failure. Option C addresses CPU, not memory. Option D (deleting the namespace) is destructive and unnecessary.

Answer

Delete and recreate the pod to clear the crash loop

Answer

Increase the CPU request for the container

Answer

Delete the namespace and redeploy all workloads

Question 14

Which of the following Dockerfile instructions sets the working directory for any subsequent RUN, CMD, ENTRYPOINT, COPY, and ADD instructions?

Accepted Answer

WORKDIR. Option C is correct. The WORKDIR instruction sets the working directory for all subsequent instructions in the Dockerfile. COPY and ADD are used to copy files, EXPOSE documents network ports, and USER sets the user name.

Answer

EXPOSE

Answer

COPY

Answer

USER

Question 15

You have a multi-stage Dockerfile. The first stage builds a binary using a large build image. The second stage copies the binary from the first stage into a minimal runtime image. Which Dockerfile instruction is used to copy artifacts from a previous stage?

Accepted Answer

COPY --from=builder /app/artifact /app/. Option A is correct. COPY --from=<stage-name> copies files from a named stage in a multi-stage build. ADD can also copy files but is more feature-rich (supports URLs, tar extraction). However, for copying build artifacts from a previous stage, COPY --from is the standard and recommended approach. CMD and ENTRYPOINT are for runtime commands, not for copying files.

Answer

ADD --from=builder /app/artifact /app/

Answer

ENTRYPOINT --from=builder /app/artifact /app/

Answer

CMD --from=builder /app/artifact /app/