CKAD Application Design and Build Practice Test 3 — 15 Questions

Question 1

You have a multi-stage Docker build. The first stage compiles a binary, and the second stage copies the binary from the first stage. What is the correct COPY syntax to copy a file named 'app' from the first stage named 'builder'?

Accepted Answer

COPY --from=builder app /app/. The COPY --from=builder syntax copies files from a previous build stage.

Answer

COPY app /app/

Answer

COPY --stage=builder app /app/

Answer

COPY source=builder app /app/

Question 2

What is the purpose of the '.dockerignore' file?

Accepted Answer

To exclude files from the build context. .dockerignore prevents unnecessary files from being sent to the Docker daemon as part of the build context.

Answer

To specify which files to include in the image

Answer

To ignore files during docker push

Answer

To list environment variables to ignore

Question 3

A developer wants to tag a local image 'myapp:latest' with the tag 'v1.0.0' for pushing to a registry. Which kubectl command does this?

Accepted Answer

docker tag myapp:latest myapp:v1.0.0. docker tag is the correct command for tagging images.

Answer

docker push myapp:v1.0.0

Answer

kubectl tag myapp:latest myapp:v1.0.0

Answer

kubectl set image myapp:v1.0.0

Question 4

What is the correct apiVersion for a Kubernetes Job in v1.29?

Accepted Answer

batch/v1. Jobs use batch/v1 as of Kubernetes 1.21+.

Answer

batch/v1beta1

Answer

apps/v1

Answer

v1

Question 5

A user runs 'kubectl run nginx --image=nginx --restart=Never' and the pod goes into 'Pending' state. What is a likely reason?

Accepted Answer

The node has insufficient resources to schedule the pod. Pending often indicates resource constraints like insufficient CPU or memory.

Answer

The image name is incorrect

Answer

The pod is missing a readiness probe

Answer

The pod's restart policy is set to Never

Question 6

A CronJob is configured with 'concurrencyPolicy: Forbid'. If a job from the previous schedule is still running when the next scheduled time arrives, what happens?

Accepted Answer

The new job is skipped until the old job completes. Forbid prevents concurrent runs; the next job is skipped if the previous one is still running.

Answer

The CronJob is suspended

Answer

The new job starts immediately, and the old job is terminated

Answer

Both jobs run concurrently

Question 7

A user creates a Job with '.spec.completions=5' and '.spec.parallelism=2'. How many pods will run at the same time?

Accepted Answer

2. parallelism defines the maximum number of pods running concurrently.

Answer

5

Answer

10

Answer

7

Question 8

You need to debug a pod that has no running container because it crashed. The pod is in CrashLoopBackOff. Which command allows you to start a temporary container in the same pod for debugging?

Accepted Answer

kubectl debug <pod> -it --image=busybox. kubectl debug can add an ephemeral container to a running or crashed pod.

Answer

kubectl attach <pod>

Answer

kubectl run debug --image=busybox

Answer

kubectl exec -it <pod> -- /bin/bash

Question 9

What is the default restart policy for a pod created with 'kubectl run nginx --image=nginx'?

Accepted Answer

Always. The default restart policy is Always for pods created by kubectl run without --restart flag.

Answer

OnFailure

Answer

Never

Answer

Restart

Question 10

Which TWO of the following are valid patterns for sidecar containers in a multi-container pod?

Accepted Answer

Adapter. The sidecar, adapter, and ambassador are common patterns. Init container is not a sidecar pattern.

Answer

Ambassador

Answer

Init container

Answer

Proxy

Question 11

Which THREE of the following are valid fields in the '.spec' of a Job manifest?

Accepted Answer

parallelism. backoffLimit, parallelism, and completions are all valid Job spec fields.

Answer

replicas

Answer

strategy

Question 12

Which TWO of the following are valid concurrencyPolicy values for a CronJob?

Accepted Answer

Forbid. Allow, Forbid, and Replace are the three valid values.

Answer

Parallel

Answer

Serial

Answer

Replace

Question 13

A developer wants to containerize a Node.js application. The Dockerfile should first copy only package.json and package-lock.json, run npm install, then copy the rest of the source code. Which Dockerfile best achieves this?

Accepted Answer

COPY package*.json /app/
RUN npm install
COPY . /app/. Option B is correct because it copies the package files first, runs npm install to leverage Docker layer caching, and then copies the rest of the source code. Option A copies everything first, which invalidates the cache for npm install on every source code change. Option C and D use ADD, which is unnecessary for local files and may have unintended behaviors like extracting archives.

Answer

COPY . /app
RUN npm install

Answer

ADD package*.json /app/
RUN npm install
ADD . /app/

Answer

ADD . /app
RUN npm install

Question 14

Which command builds a Docker image from the current directory and tags it as 'myapp:v1'?

Accepted Answer

docker build -t myapp:v1 .. Option C is correct. The 'docker build -t' command is used to tag an image during build. Option A misses the tag. Option B uses wrong syntax. Option D uses 'push' which is for pushing images.

Answer

docker build .

Answer

docker build -t myapp:v1

Answer

docker push myapp:v1

Question 15

You need to run a database migration as a container before the main application container starts. Which Kubernetes concept should you use?

Accepted Answer

Init container. Option B is correct. Init containers run sequentially before the main containers start and are ideal for initialization tasks like migrations. Option A (sidecar) runs concurrently. Option C (ephemeral) is for debugging. Option D (job) runs to completion but not as part of a pod's lifecycle.

Answer

Job

Answer

Sidecar container

Answer

Ephemeral container