Container Orchestration

A team deploys a microservice that requires sticky sessions. The service runs on Kubernetes with multiple replicas. Which Kubernetes resource should be used to ensure requests from a client are consistently routed to the same pod?

A Kubernetes cluster is experiencing network latency. The team suspects that the number of services and endpoints is causing iptables performance degradation. Which CNI plugin or network policy approach is most likely to improve performance?

A developer wants to ensure that a pod runs only on nodes with SSDs. Which mechanism should be used?

An application running in a Kubernetes pod needs to access a database that is deployed on a VM outside the cluster. The database IP is stable. Which is the best way to expose the database to the pod?

A team notices that a ReplicaSet is not creating the desired number of pods. The ReplicaSet YAML is correctly configured with replicas: 3. The cluster has sufficient resources. What is the most likely cause?

Which TWO of the following are valid ways to expose a set of pods as a network service in Kubernetes?

Which THREE of the following are correct statements about Kubernetes Deployments?

A DevOps team notices that a new deployment of a web application is not receiving traffic even though the pods are running. The deployment has a selector matching the pod labels, and a Service of type ClusterIP exists. What is the most likely cause?

An administrator needs to ensure that Pods from two different Deployments cannot communicate with each other. Which Kubernetes resource should be used?

A developer wants to run a one-time task that creates a database schema and then exits. Which Kubernetes workload type is most appropriate?

An application requires stable network identities and persistent storage. Which workload type should be used?

Which TWO of the following are valid methods to expose a set of pods to external traffic in Kubernetes?

Refer to the exhibit. How many containers are defined in this Pod?

Your organization runs a microservices application in a Kubernetes cluster with 5 worker nodes. Each microservice is deployed as a Deployment with 3 replicas. Recently, users report intermittent timeouts when accessing the frontend service. The frontend communicates with a backend service via ClusterIP. You check the backend pods and find that one of the three replicas is in CrashLoopBackOff. The other two backend pods are healthy. The frontend deployment has no readiness or liveness probes. You notice that the frontend's connection pool to the backend has a timeout of 5 seconds. The crashing backend pod logs show an occasional NullPointerException that causes the container to restart, but the pod becomes ready after restart within 2 seconds. However, the frontend's connection pool does not evict unhealthy connections quickly. What is the best course of action to reduce timeouts?

A company is deploying a microservices application on Kubernetes. They want to ensure that configuration data, such as database URLs and feature flags, can be updated without rebuilding container images. Which Kubernetes resource should they use?

Which TWO statements accurately describe Kubernetes scheduling?

Based on the exhibit, why is the pod web-pod not running?

Drag and drop the steps for a rolling update of a Kubernetes Deployment into the correct order.

Drag and drop the steps to update a Kubernetes Secret and ensure Pods use the new value into the correct order.

Match each Kubernetes component to its role in the control plane.

Match each Kubernetes command (kubectl) to its primary function.

A pod in the 'production' namespace is in a CrashLoopBackOff state. The pod has been running successfully for several days. You run 'kubectl describe pod app-pod -n production' and see the message: 'OOMKilled'. What is the MOST appropriate action to resolve this issue?

Which of the following best describes a key advantage of containers over virtual machines?

You are designing a microservices application that requires each service to be independently deployable and scalable. The services communicate over HTTP and need service discovery. Which orchestration feature BEST addresses the need for service discovery?

A developer creates a Deployment with replicas: 3 and strategy type: RollingUpdate with maxSurge: 1 and maxUnavailable: 1. During a rolling update, the Deployment controller creates a new ReplicaSet. After the new ReplicaSet has 2 pods ready, the node running one of the original ReplicaSet's pods fails. What is the MOST likely number of total pods running after the node failure, assuming no other actions?

Which of the following is a container runtime that implements the Container Runtime Interface (CRI)?

You need to run a batch job that processes a queue of 1000 items. The job should run to completion and then terminate. Which Kubernetes resource is BEST suited for this workload?

A company wants to adopt immutable infrastructure for its containerized applications. Which practice BEST exemplifies immutability?

Which command correctly creates a Deployment named 'web-app' with the image 'nginx:1.21' and 3 replicas?

What is the primary purpose of the Open Container Initiative (OCI)?

You have a microservices application where Service A needs to communicate with Service B running in a different namespace ('backend'). Both namespaces have a NetworkPolicy that denies all ingress by default. You create a NetworkPolicy in the 'backend' namespace allowing ingress from pods with label 'app: frontend'. What else is needed for Service A to reach Service B?

A container image is built from a Dockerfile with multiple layers. Which statement about container image layers is TRUE?

You need to run a stateful application that requires stable network identities and persistent storage per pod. Which Kubernetes resource is BEST suited?

Which TWO statements about Docker Compose and Kubernetes are correct?

Which THREE are benefits of using container orchestration platforms like Kubernetes?

Which TWO are characteristics of the microservices architecture that are supported by container orchestration?

Which of the following is a key benefit of using containers over virtual machines?

What is the purpose of the Container Runtime Interface (CRI) in Kubernetes?

Which Kubernetes resource is used to run a batch job that runs to completion?

A user wants to ensure that a pod is automatically restarted if its main process crashes. Which Kubernetes controller should they use?

A pod is stuck in 'Pending' state. You run 'kubectl describe pod mypod' and see the event '0/4 nodes are available: 4 Insufficient cpu'. What is the most likely cause?

Which command would you use to view the logs of a specific container in a multi-container pod?

What is the role of etcd in a Kubernetes cluster?

A developer wants to expose a set of pods running a web application on a stable IP address. Which Kubernetes resource should they create?

A pod is in CrashLoopBackOff. You check the logs and see 'Error: container process not found'. What is the most likely cause?

An administrator wants to ensure that a Deployment named 'webapp' always has exactly 3 replicas running across distinct nodes to improve fault tolerance. Which field in the Deployment spec should they configure?

A user creates a Service of type ClusterIP with a selector matching pods labeled 'app: myapp'. However, a pod named 'myapp-pod' with label 'app: myapp' is not receiving traffic. What is a possible reason?

Which of the following is a characteristic of immutable infrastructure?

Which TWO of the following are valid container runtimes that implement the CRI? (Choose two.)

Which THREE of the following are benefits of using container orchestration? (Choose three.)

Which TWO statements about container images are correct? (Choose two.)

What is the primary difference between a container and a virtual machine (VM)?

Which Kubernetes resource is best suited for running a batch processing job that must complete successfully exactly once?

A pod named 'web-app' is not able to resolve the hostname 'db-service' from another namespace 'data'. The 'db-service' Service exists in the 'data' namespace. What is the most likely cause?

What is the Container Runtime Interface (CRI)?

Which of the following is a benefit of container orchestration?

A Deployment manages 3 replicas of a pod. During a rolling update, one of the new pods enters CrashLoopBackOff. What happens next?

Which of the following is a valid use case for a DaemonSet?

What is the purpose of a readiness probe in a Kubernetes pod?

A developer wants to run a containerized application locally for development. Which tool is most appropriate?

Which Kubernetes resource can be used to define network policies that control traffic between pods?

What is the concept of 'immutable infrastructure' as applied to Kubernetes?

Which component of Kubernetes is responsible for maintaining the desired state of the cluster?

Which TWO of the following are benefits of using a container orchestration platform like Kubernetes? (Select 2)

Which THREE of the following are true about the Open Container Initiative (OCI)? (Select 3)

Which TWO of the following are characteristics of a microservices architecture? (Select 2)

A pod in the 'production' namespace is in a CrashLoopBackOff state. The pod has been running successfully for several days. You run 'kubectl describe pod app-pod -n production' and see the message: 'OOMKilled'. What is the MOST appropriate action to resolve this issue?

What is the primary purpose of a container orchestration platform like Kubernetes?

A developer wants to deploy a stateful application that requires stable network identities and persistent storage per pod instance. Which Kubernetes resource is most appropriate?

You have a microservices application with a frontend service that needs to communicate with a backend service running in a different namespace ('backend-ns'). The default namespace for the frontend is 'frontend-ns'. What DNS name should the frontend use to reach the backend service named 'backend-svc'?

Which component is responsible for running containers in a Kubernetes node and implements the Container Runtime Interface (CRI)?

An administrator wants to ensure that a specific pod only runs on nodes that have solid-state drives (SSDs). Nodes with SSDs are labeled with 'disktype=ssd'. Which pod specification field should be used?

What is a key benefit of using containers over virtual machines for application deployment?

A Kubernetes cluster has a Service named 'my-svc' in the 'default' namespace. Which command would correctly expose this service as an external endpoint using a cloud load balancer?

You have a multi-container pod with a main application container and a sidecar container that handles log shipping. The sidecar container should start before the main container and stop after the main container finishes. Which pod configuration should you use?

What is the purpose of a readiness probe in a Kubernetes pod?

Which of the following is a key principle of microservices architecture?

You run the command 'kubectl get pods -n default' and see no pods listed. However, you are sure there should be pods. What is the most likely cause?

Which TWO of the following are characteristics of immutable infrastructure? (Select two.)

Which THREE of the following are benefits of using a container orchestration platform like Kubernetes? (Select three.)

Which TWO of the following are valid ways to expose a set of pods as a network service in Kubernetes? (Select two.)

What is the primary difference between a container and a virtual machine (VM)?

A DevOps engineer wants to deploy a stateful application that requires stable network identities and persistent storage. Which Kubernetes resource is most appropriate?

A pod is stuck in the Pending state. Running 'kubectl describe pod <pod-name>' shows the event: '0/3 nodes are available: 1 node had taint {node.kubernetes.io/disk-pressure: }, 2 nodes had taint {node.kubernetes.io/memory-pressure: }'. What is the most likely cause?

Which component in Kubernetes is responsible for managing the lifecycle of pods and ensuring the desired number of replicas are running?

An application requires that a specific set of pods be placed on nodes labeled with 'gpu=true'. Which Kubernetes field should be used in the pod spec to enforce this?

Which of the following is a benefit of using container orchestration platforms like Kubernetes?

A user runs 'kubectl exec -it pod1 -- /bin/sh' and gets the error: 'error: unable to upgrade connection: container not found ("app")'. The pod has one container named 'app'. What is the most likely cause?

Which command is used to create a Deployment that runs an nginx container with 3 replicas?

A company wants to run a batch job that processes data and then terminates. Which Kubernetes resource should they use?

When using a Service of type ClusterIP, how do pods reach the service?

What is the purpose of a readiness probe in a Kubernetes pod?

An administrator needs to expose a set of pods running a web application on a static port on each node's IP address. Which Service type should they use?

Which TWO statements about containers are true compared to virtual machines? (Select TWO.)

Which THREE are valid ways to perform a rolling update of a Deployment in Kubernetes? (Select THREE.)

Which TWO are benefits of using a container orchestration platform like Kubernetes? (Select TWO.)

A pod in the 'production' namespace is in a CrashLoopBackOff state. The pod has been running successfully for several days. You run 'kubectl describe pod app-pod -n production' and see the message: 'OOMKilled'. What is the MOST appropriate action to resolve this issue?

What is the primary benefit of using containers over virtual machines?

A Kubernetes cluster has a Deployment running three replicas of an application. You need to update the container image to a new version with zero downtime. Which approach is most appropriate?

You have a microservices application where Service A needs to discover the IP of Service B. Both services run in the same Kubernetes cluster. Which approach is the most Kubernetes-native way for Service A to reach Service B?

Which component is responsible for running containers on a Kubernetes node?

A container image built using a Dockerfile with multiple layers is stored in a registry. When a node pulls this image, which statement about layers is true?

What is the purpose of the Container Runtime Interface (CRI) in Kubernetes?

Which of the following is a benefit of using an orchestrator like Kubernetes?

You have a Kubernetes cluster with multiple nodes. You need to ensure that a pod runs on a node that has an SSD. How should you achieve this?

Your application consists of a frontend and a backend. The frontend needs to communicate with the backend using a stable DNS name. The backend is deployed as a Deployment with 3 replicas. Which Kubernetes resource should you create to provide a stable DNS name for the backend?

What is the OCI (Open Container Initiative) responsible for?

A developer wants to run a container image locally for testing before deploying to a Kubernetes cluster. Which tool is most appropriate for this task?

Which TWO statements accurately describe the concept of immutable infrastructure in the context of container orchestration? (Select two.)

Which THREE of the following are valid container runtimes that can be used with Kubernetes via the Container Runtime Interface (CRI)? (Select three.)

Which TWO statements correctly describe how Kubernetes handles self-healing? (Select two.)

Which of the following is a key benefit of container orchestration compared to running containers manually?

A developer wants to deploy a stateful application that requires stable network identities and persistent storage. Which Kubernetes resource is best suited for this workload?

A Kubernetes cluster has a single control plane node and two worker nodes. The control plane node fails. What is the immediate impact on the workloads running on the worker nodes?

An administrator wants to ensure that a pod only runs on nodes that have a specific GPU. Which mechanism should be used to achieve this?

Which statement accurately describes a key difference between containers and virtual machines?

A pod spec includes a liveness probe that runs 'cat /tmp/healthy'. The probe is configured with initialDelaySeconds: 10, periodSeconds: 5. At what point does the kubelet first execute the probe?

An application requires that a pod must not be scheduled on the same node as another pod from the same Deployment. Which configuration should be used?

What is the primary purpose of the Container Runtime Interface (CRI) in Kubernetes?

You create a Service of type ClusterIP with the name 'my-service' in the 'default' namespace. What DNS name resolves to the service's cluster IP from a pod in the same namespace?

A pod is running but its container exits with code 137. The pod logs show 'Killed'. What is the most likely cause?

Which component in Kubernetes is responsible for maintaining the desired state of the cluster?

A DevOps engineer wants to update a Deployment's container image from 'v1' to 'v2' with zero downtime. Which kubectl command should they use?

What is the primary benefit of containers over virtual machines?

You have a microservices application deployed as a set of Pods in a Kubernetes cluster. You need to ensure that Pods can discover each other using stable DNS names. Which Kubernetes resource should you create?

A pod is stuck in the 'Pending' state. You run 'kubectl describe pod mypod' and see the event: '0/3 nodes are available: 1 node had taint that the pod didn't tolerate, 2 Insufficient cpu.' What is the most likely cause?

Which component is responsible for managing the lifecycle of containers on a Kubernetes node?

You need to deploy a batch job that processes a queue and runs to completion. The job should run exactly once and create exactly one pod per work item, but some items may fail. Which Kubernetes resource is best suited?

Which of the following is a container runtime that implements the Container Runtime Interface (CRI)?

You have a Deployment with three replicas. You want to update the container image but ensure that only one pod is updated at a time, and the update proceeds only if the new pod becomes healthy. Which update strategy should you configure?

What is the purpose of the 'kubectl scale' command?

You are troubleshooting a service that is not accessible from within the cluster. The service has a label selector that matches the pods. You run 'kubectl get endpoints myservice' and see that the ENDPOINTS column is empty. What is the most likely cause?

Which of the following best describes immutable infrastructure?

Which command would you use to view the logs of a specific container in a pod?

A pod is in the 'CrashLoopBackOff' state. You run 'kubectl logs mypod' and see an error related to missing environment variables. The pod is part of a Deployment. What is the best way to fix this without recreating the entire Deployment?

Which TWO of the following are benefits of container orchestration?

Which THREE of the following are key characteristics of microservices architecture?

Which TWO of the following are true about the Open Container Initiative (OCI)?

What is a key advantage of containers compared to virtual machines?

Which component implements the Container Runtime Interface (CRI) to manage container lifecycle in Kubernetes?

You need to ensure that a set of pods in a Deployment can be reached by other pods using a stable IP address and DNS name. Which Kubernetes object should you use?

A Kubernetes cluster has two nodes: control-plane and worker. The worker node runs several pods. The control-plane node becomes unreachable. What is the immediate impact on the pods running on the worker node?

What is the purpose of a readiness probe in a Kubernetes pod?

You are writing a Deployment YAML (apps/v1) for a stateless web application. The application should have 3 replicas and use rolling updates with maxSurge=1 and maxUnavailable=0. Which field should you set under spec.strategy?

You run 'kubectl get pods' and see that a pod named 'web-frontend' is in 'Pending' state for more than 5 minutes. What is the most likely cause?

Which of the following is a benefit of container orchestration?

You need to run a batch job that processes data every hour and exits upon completion. Which Kubernetes resource should you use?

Which command would you use to get the logs of a pod named 'backend' in the 'production' namespace?

You are asked to deploy a Kubernetes service that exposes a set of pods internally within the cluster only. The service should not be accessible from outside the cluster. Which Service type should you choose?

Which of the following describes the Open Container Initiative (OCI) image specification?

Which TWO of the following are benefits of using a container orchestration platform like Kubernetes? (Select 2)

Which TWO of the following are valid reasons to use a DaemonSet instead of a Deployment? (Select 2)

Which THREE of the following are characteristics of a microservices architecture? (Select 3)

What is a key benefit of container orchestration platforms like Kubernetes?

Which component is responsible for running containers on a Kubernetes node?

Which Open Container Initiative (OCI) specification defines the format of container images?

A developer wants to deploy a stateless web application that should scale to 5 replicas. Each replica must be identical and should be automatically replaced if it fails. Which Kubernetes resource should be used?

A pod is in the 'Pending' state. Which of the following is a likely cause?

An administrator runs 'kubectl get pods' and sees that a pod named 'app-pod' is in 'CrashLoopBackOff'. They run 'kubectl logs app-pod' and see a segmentation fault error. What is the most likely cause?

A team wants to deploy a batch job that runs once to process a large dataset. The job should run to completion and then terminate. Which Kubernetes resource should be used?

A Kubernetes administrator needs to restrict inbound traffic to a set of pods. Only pods with the label 'app: frontend' in the same namespace should be allowed to reach the pods on TCP port 8080. Which resource should be used?

A pod has resource requests of 512Mi memory and 500m CPU, and limits of 1Gi memory and 1 CPU. The node has 4Gi memory and 2 CPU cores. If the pod tries to use 700m CPU, what will happen?

A developer creates a Deployment with 3 replicas. After updating the pod template, they run 'kubectl rollout status deployment/my-deployment' and see that the rollout is stuck. Which command should they use to investigate the rollout history?

A user runs 'kubectl exec -it pod1 -- /bin/sh' and gets an error: 'error: unable to upgrade connection: container not found'. The pod is running and has one container named 'app'. What is the most likely issue?

A pod uses a ServiceAccount that has a RoleBinding to a Role with 'get', 'list', 'watch' on 'pods'. The pod tries to list pods in the same namespace. Will the request succeed?

Which TWO statements about containers compared to virtual machines are correct? (Select 2)

Which THREE are benefits of using a container orchestration platform? (Select 3)

Which TWO statements about the Container Runtime Interface (CRI) are correct? (Select 2)

What is a primary benefit of using containers over virtual machines?

Which Kubernetes component is responsible for maintaining the desired state of the cluster?

What is the purpose of the Container Runtime Interface (CRI)?

You have a Deployment running 3 replicas. You need to update the container image without downtime. Which command updates the image while performing a rolling update?

A Pod is stuck in 'Pending' state. Which command is most helpful to diagnose the issue?

You need to run a batch job that processes a queue and then terminates. Which Kubernetes resource should you use?

What is the difference between a liveness probe and a readiness probe?

You want to ensure that a Pod runs on every Node in the cluster. Which resource should you use?

A Service of type ClusterIP is created for a Deployment, but Pods in other namespaces cannot reach it. What is the most likely cause?

In a container image built from a Dockerfile, what is the purpose of the CMD instruction?

You are designing a microservices application. Which of the following is a key principle of microservices architecture?

Which of the following is an example of immutable infrastructure?

Which two of the following are container runtimes that implement the Container Runtime Interface (CRI)? (Choose two.)

Which three of the following are benefits of container orchestration? (Choose three.)

Which two of the following are characteristics of container images built using OCI standards? (Choose two.)

Which of the following is a key benefit of container orchestration?

What is the Container Runtime Interface (CRI)?

Which of the following is a key difference between containers and virtual machines?

A Kubernetes Deployment manages a set of pods. What is the primary purpose of a Deployment?

A pod is stuck in 'Pending' state. Which of the following is a likely cause?

Which command would you run to get a list of all pods in all namespaces?

What is the purpose of a Readiness Probe in a Kubernetes pod?

Which Kubernetes resource should be used to run a one-time task that performs a computation and then exits?

What is the Open Container Initiative (OCI) responsible for?

A microservices application has multiple services that need to discover each other by name. Which Kubernetes object provides built-in service discovery via DNS?

You need to deploy an application that requires exactly one pod per cluster node for logging purposes. Which Kubernetes workload resource should you use?

Which of the following correctly describes the concept of 'immutable infrastructure' in the context of container orchestration?

Which TWO of the following are benefits of using a container orchestration platform like Kubernetes? (Choose two.)

Which THREE are valid container runtimes that implement the Kubernetes CRI? (Choose three.)

Which TWO statements about container images are correct? (Choose two.)

A pod in the 'production' namespace is in a CrashLoopBackOff state. The pod has been running successfully for several days. You run 'kubectl describe pod app-pod -n production' and see the message: 'OOMKilled'. What is the MOST appropriate action to resolve this issue?

Which TWO of the following are benefits of using containers over virtual machines? (Choose 2)

Which TWO of the following are required fields when defining a container in a Kubernetes Pod spec? (Choose 2)

Which THREE of the following are true about the Open Container Initiative (OCI)? (Choose 3)

Which TWO of the following are characteristics of microservices architecture? (Choose 2)

Which THREE of the following are key benefits of container orchestration? (Choose 3)

Which TWO of the following correctly describe the difference between Docker Compose and Kubernetes? (Choose 2)

Which THREE of the following are true about the Container Runtime Interface (CRI)? (Choose 3)

Which TWO of the following are true about container images? (Choose 2)

Which THREE of the following are core principles of immutable infrastructure? (Choose 3)

Which TWO of the following are true about service discovery in Kubernetes? (Choose 2)

Which TWO of the following are true about container networking basics? (Choose 2)

Which THREE of the following are true about container lifecycle? (Choose 3)