Cluster Setup questions on this certification test your ability to deploy and manage cluster setup concepts in scenario-based situations.
Start practicing
Cluster Setup — choose a session length
Free · No account required
Domain overview
Use this page to practise Cluster Setup questions for this certification. Focus on how the exam tests cluster setup in scenario format — understanding the why behind each answer builds more durable knowledge than memorising options.
Exam objectives
Core Cluster Setup concepts and how they apply in real-world cloud scenarios.
How to deploy cluster setup correctly and verify the outcome.
Troubleshooting cluster setup issues by interpreting error output and system state.
Cloud best practices and Cluster Setup design trade-offs tested by this certification.
Selecting the most expensive service when a simpler managed option meets the requirement.
Forgetting that cloud resources must be explicitly secured — defaults are rarely secure.
Choosing a global service fix when the issue is region-specific.
Overlooking cost implications of cross-region data transfer in architecture questions.
Click any question to see the full explanation and answer options, or start a focused practice session above.
A team needs to set up a highly available Kubernetes control plane across three availability zones. What is the minimum number of etcd members required to achieve fault tolerance against one zone failure?
2A security audit reveals that the kube-apiserver is using the default insecure port 8080 on a production cluster. Which is the most secure and recommended remediation?
3During a cluster upgrade, the kubelet on a worker node fails to start after updating the kubelet binary. The kubelet logs show: 'failed to load bootstrap client certificate: open /var/lib/kubelet/pki/kubelet-client-current.pem: no such file or directory'. What is the most likely cause?
4Which TWO of the following are valid methods to secure the etcd cluster in a Kubernetes setup?
5Which THREE of the following are required when setting up a Kubernetes control plane with kubeadm for a production environment?
6A cluster is using kubeadm and the control plane components are running as static pods. Where are the static pod manifests for the API server located by default?
7You are responsible for securing a multi-tenant Kubernetes cluster that uses kubeadm for bootstrapping. The cluster has three control plane nodes and five worker nodes, all running Ubuntu 22.04. A recent security scan discovered that the etcd data directory is not encrypted at rest. The cluster stores sensitive customer data in secrets. You plan to enable encryption at rest for etcd. You have already created an encryption configuration file and placed it at /etc/kubernetes/encryption-config.yaml. The cluster is currently running Kubernetes v1.28.0 with etcd v3.5.9. You need to ensure that all existing and new secrets are encrypted. You also want to minimize downtime. Which of the following steps should you take?
8A security team wants to ensure that all communication between the kubelet and the API server is encrypted. Which flag must be set on the kubelet to enforce this?
9Order the steps to rotate a Kubernetes API server certificate.
10Match each Kubernetes admission controller to its role in security.
Cluster Setup questions on this certification test your ability to deploy and manage cluster setup concepts in scenario-based situations.
The Courseiva CKS question bank contains 10 questions in the Cluster Setup domain. Click any question to see the full explanation and answer breakdown.
Start with a 10-question focused session to identify your baseline accuracy in this domain. Read every explanation — even for questions you answer correctly — to understand the reasoning. Once you score consistently above 80%, move to a 20–30 question session to confirm depth before moving to the next domain.
Yes — the session launcher on this page draws questions exclusively from the Cluster Setup domain. Choose 10, 20, 30, or 50 questions for a focused session, or click individual questions to review them one by one.
Save your results, see per-domain analytics, and get readiness scores — free, for every certification.
Sign Up FreeFree forever · Every certification included