Container Orchestration

A team deploys a microservice that requires sticky sessions. The service runs on Kubernetes with multiple replicas. Which Kubernetes resource should be used to ensure requests from a client are consistently routed to the same pod?

A Kubernetes cluster is experiencing network latency. The team suspects that the number of services and endpoints is causing iptables performance degradation. Which CNI plugin or network policy approach is most likely to improve performance?

A developer wants to ensure that a pod runs only on nodes with SSDs. Which mechanism should be used?

An application running in a Kubernetes pod needs to access a database that is deployed on a VM outside the cluster. The database IP is stable. Which is the best way to expose the database to the pod?

A team notices that a ReplicaSet is not creating the desired number of pods. The ReplicaSet YAML is correctly configured with replicas: 3. The cluster has sufficient resources. What is the most likely cause?

Which TWO of the following are valid ways to expose a set of pods as a network service in Kubernetes?

Which THREE of the following are correct statements about Kubernetes Deployments?

A DevOps team notices that a new deployment of a web application is not receiving traffic even though the pods are running. The deployment has a selector matching the pod labels, and a Service of type ClusterIP exists. What is the most likely cause?

An administrator needs to ensure that Pods from two different Deployments cannot communicate with each other. Which Kubernetes resource should be used?

A developer wants to run a one-time task that creates a database schema and then exits. Which Kubernetes workload type is most appropriate?

An application requires stable network identities and persistent storage. Which workload type should be used?

Which TWO of the following are valid methods to expose a set of pods to external traffic in Kubernetes?

Refer to the exhibit. How many containers are defined in this Pod?

Your organization runs a microservices application in a Kubernetes cluster with 5 worker nodes. Each microservice is deployed as a Deployment with 3 replicas. Recently, users report intermittent timeouts when accessing the frontend service. The frontend communicates with a backend service via ClusterIP. You check the backend pods and find that one of the three replicas is in CrashLoopBackOff. The other two backend pods are healthy. The frontend deployment has no readiness or liveness probes. You notice that the frontend's connection pool to the backend has a timeout of 5 seconds. The crashing backend pod logs show an occasional NullPointerException that causes the container to restart, but the pod becomes ready after restart within 2 seconds. However, the frontend's connection pool does not evict unhealthy connections quickly. What is the best course of action to reduce timeouts?

A company is deploying a microservices application on Kubernetes. They want to ensure that configuration data, such as database URLs and feature flags, can be updated without rebuilding container images. Which Kubernetes resource should they use?

Based on the exhibit, why is the pod web-pod not running?

Drag and drop the steps for a rolling update of a Kubernetes Deployment into the correct order.

Drag and drop the steps to update a Kubernetes Secret and ensure Pods use the new value into the correct order.

Match each Kubernetes component to its role in the control plane.

Match each Kubernetes command (kubectl) to its primary function.

A pod in the 'production' namespace is in a CrashLoopBackOff state. The pod has been running successfully for several days. You run 'kubectl describe pod app-pod -n production' and see the message: 'OOMKilled'. What is the MOST appropriate action to resolve this issue?

You are designing a microservices application that requires each service to be independently deployable and scalable. The services communicate over HTTP and need service discovery. Which orchestration feature BEST addresses the need for service discovery?

A developer creates a Deployment with replicas: 3 and strategy type: RollingUpdate with maxSurge: 1 and maxUnavailable: 1. During a rolling update, the Deployment controller creates a new ReplicaSet. After the new ReplicaSet has 2 pods ready, the node running one of the original ReplicaSet's pods fails. What is the MOST likely number of total pods running after the node failure, assuming no other actions?

Which of the following is a container runtime that implements the Container Runtime Interface (CRI)?

You need to run a batch job that processes a queue of 1000 items. The job should run to completion and then terminate. Which Kubernetes resource is BEST suited for this workload?

A company wants to adopt immutable infrastructure for its containerized applications. Which practice BEST exemplifies immutability?

Which command correctly creates a Deployment named 'web-app' with the image 'nginx:1.21' and 3 replicas?

What is the primary purpose of the Open Container Initiative (OCI)?

You have a microservices application where Service A needs to communicate with Service B running in a different namespace ('backend'). Both namespaces have a NetworkPolicy that denies all ingress by default. You create a NetworkPolicy in the 'backend' namespace allowing ingress from pods with label 'app: frontend'. What else is needed for Service A to reach Service B?

A container image is built from a Dockerfile with multiple layers. Which statement about container image layers is TRUE?

You need to run a stateful application that requires stable network identities and persistent storage per pod. Which Kubernetes resource is BEST suited?

Which of the following is a key benefit of using containers over virtual machines?

What is the purpose of the Container Runtime Interface (CRI) in Kubernetes?

Which Kubernetes resource is used to run a batch job that runs to completion?

A user wants to ensure that a pod is automatically restarted if its main process crashes. Which Kubernetes controller should they use?

A pod is stuck in 'Pending' state. You run 'kubectl describe pod mypod' and see the event '0/4 nodes are available: 4 Insufficient cpu'. What is the most likely cause?

Which command would you use to view the logs of a specific container in a multi-container pod, using the short flag?

What is the role of etcd in a Kubernetes cluster?

A developer wants to expose a set of pods running a web application on a stable IP address. Which Kubernetes resource should they create?

A pod is in CrashLoopBackOff. You check the logs and see 'Error: container process not found'. What is the most likely cause?

A user creates a Service of type ClusterIP with a selector matching pods labeled 'app: myapp'. However, a pod named 'myapp-pod' with label 'app: myapp' is not receiving traffic. What is a possible reason?

Which TWO of the following are valid container runtimes that implement the CRI? (Choose two.)

Which THREE of the following are benefits of using container orchestration? (Choose three.)

Which TWO statements about container images are correct? (Choose two.)

What is the primary difference between a container and a virtual machine (VM)?

Which Kubernetes resource is best suited for running a batch processing job that must complete successfully exactly once?

What is the Container Runtime Interface (CRI)?

Which of the following is a benefit of container orchestration?

A Deployment manages 3 replicas of a pod. During a rolling update, one of the new pods enters CrashLoopBackOff. What happens next?

Which of the following is a valid use case for a DaemonSet?

What is the purpose of a readiness probe in a Kubernetes pod?

A developer wants to run a containerized application locally for development. Which tool is most appropriate?

Which Kubernetes resource can be used to define network policies that control traffic between pods?

What is the concept of 'immutable infrastructure' as applied to Kubernetes?

Which component of Kubernetes is responsible for maintaining the desired state of the cluster?

Which TWO of the following are benefits of using a container orchestration platform like Kubernetes? (Select 2)

Which THREE of the following are true about the Open Container Initiative (OCI)? (Select 3)

Which TWO of the following are characteristics of a microservices architecture? (Select 2)

A pod in the 'production' namespace is in a CrashLoopBackOff state. The pod has been running successfully for several days. You run 'kubectl describe pod app-pod -n production' and see the message: 'OOMKilled'. What is the MOST appropriate action to resolve this issue?

A developer wants to deploy a stateful application that requires stable network identities and persistent storage per pod instance. Which Kubernetes resource is most appropriate?

Which component is responsible for running containers in a Kubernetes node and implements the Container Runtime Interface (CRI)?

An administrator wants to ensure that a specific pod only runs on nodes that have solid-state drives (SSDs). Nodes with SSDs are labeled with 'disktype=ssd'. Which pod specification field should be used?

What is a key benefit of using containers over virtual machines for application deployment?

A Kubernetes cluster has a Service named 'my-svc' in the 'default' namespace. Which command would correctly expose this service as an external endpoint using a cloud load balancer?

What is the purpose of a readiness probe in a Kubernetes pod?

Which of the following is a key principle of microservices architecture?

Which TWO of the following are characteristics of immutable infrastructure? (Select two.)

What is the primary difference between a container and a virtual machine (VM)?

A DevOps engineer wants to deploy a stateful application that requires stable network identities and persistent storage. Which Kubernetes resource is most appropriate?

A pod is stuck in the Pending state. Running 'kubectl describe pod <pod-name>' shows the event: '0/3 nodes are available: 1 node had taint {node.kubernetes.io/disk-pressure: }, 2 nodes had taint {node.kubernetes.io/memory-pressure: }'. What is the most likely cause?

An application requires that a specific set of pods be placed on nodes labeled with 'gpu=true'. Which Kubernetes field should be used in the pod spec to enforce this?

Which of the following is a benefit of using container orchestration platforms like Kubernetes?

A user runs 'kubectl exec -it pod1 -- /bin/sh' and gets the error: 'error: unable to upgrade connection: container not found ("app")'. The pod has one container named 'app'. What is the most likely cause?

Which command is used to create a Deployment that runs an nginx container with 3 replicas?

A company wants to run a batch job that processes data and then terminates. Which Kubernetes resource should they use?

When using a Service of type ClusterIP, how do pods reach the service?

An administrator needs to expose a set of pods running a web application on a static port on each node's IP address. Which Service type should they use?

Which TWO statements about containers are true compared to virtual machines? (Select TWO.)

Which THREE are valid ways to perform a rolling update of a Deployment in Kubernetes? (Select THREE.)

Which TWO are benefits of using a container orchestration platform like Kubernetes? (Select TWO.)

A pod in the 'production' namespace is in a CrashLoopBackOff state. The pod has been running successfully for several days. You run 'kubectl describe pod app-pod -n production' and see the message: 'OOMKilled'. What is the MOST appropriate action to resolve this issue?

What is the primary benefit of using containers over virtual machines?

A Kubernetes cluster has a Deployment running three replicas of an application. You need to update the container image to a new version with zero downtime. Which approach is most appropriate?

You have a microservices application where Service A needs to discover the IP of Service B. Both services run in the same Kubernetes cluster. Which approach is the most Kubernetes-native way for Service A to reach Service B?

Which component is responsible for running containers on a Kubernetes node?

What is the purpose of the Container Runtime Interface (CRI) in Kubernetes?

Which of the following is a benefit of using an orchestrator like Kubernetes?

You have a Kubernetes cluster with multiple nodes. You need to ensure that a pod runs on a node that has an SSD. How should you achieve this?

Your application consists of a frontend and a backend. The frontend needs to communicate with the backend using a stable DNS name. The backend is deployed as a Deployment with 3 replicas. Which Kubernetes resource should you create to provide a stable DNS name for the backend?

What is the OCI (Open Container Initiative) responsible for?

Which TWO statements accurately describe the concept of immutable infrastructure in the context of container orchestration? (Select two.)

Which TWO statements correctly describe how Kubernetes handles self-healing? (Select two.)

Which of the following is a key benefit of container orchestration compared to running containers manually?

A developer wants to deploy a stateful application that requires stable network identities and persistent storage. Which Kubernetes resource is best suited for this workload?

A Kubernetes cluster has a single control plane node and two worker nodes. The control plane node fails. What is the immediate impact on the workloads running on the worker nodes?

Which statement accurately describes a key difference between containers and virtual machines?

A pod spec includes a liveness probe that runs 'cat /tmp/healthy'. The probe is configured with initialDelaySeconds: 10, periodSeconds: 5. At what point does the kubelet first execute the probe?

What is the primary purpose of the Container Runtime Interface (CRI) in Kubernetes?

You create a Service of type ClusterIP with the name 'my-service' in the 'default' namespace. What DNS name resolves to the service's cluster IP from a pod in the same namespace?

A pod is running but its container exits with code 137. The pod logs show 'Killed'. What is the most likely cause?

Which component in Kubernetes is responsible for maintaining the desired state of the cluster?

A DevOps engineer wants to update a Deployment's container image from 'v1' to 'v2' with zero downtime. Which kubectl command should they use?

What is the primary benefit of containers over virtual machines?

You have a microservices application deployed as a set of Pods in a Kubernetes cluster. You need to ensure that Pods can discover each other using stable DNS names. Which Kubernetes resource should you create?

A pod is stuck in the 'Pending' state. You run 'kubectl describe pod mypod' and see the event: '0/3 nodes are available: 1 node had taint that the pod didn't tolerate, 2 Insufficient cpu.' What is the most likely cause?

Which component is responsible for managing the lifecycle of containers on a Kubernetes node?

You need to deploy a batch job that processes a queue and runs to completion. The job should run exactly once and create exactly one pod per work item, but some items may fail. Which Kubernetes resource is best suited?

You have a Deployment with three replicas. You want to update the container image but ensure that only one pod is updated at a time, and the update proceeds only if the new pod becomes healthy. Which update strategy should you configure?

You are troubleshooting a service that is not accessible from within the cluster. The service has a label selector that matches the pods. You run 'kubectl get endpoints myservice' and see that the ENDPOINTS column is empty. What is the most likely cause?

Which of the following best describes immutable infrastructure?

Which THREE of the following are key characteristics of microservices architecture?

Which component implements the Container Runtime Interface (CRI) to manage container lifecycle in Kubernetes?

You need to ensure that a set of pods in a Deployment can be reached by other pods using a stable IP address and DNS name. Which Kubernetes object should you use?

A Kubernetes cluster has two nodes: control-plane and worker. The worker node runs several pods. The control-plane node becomes unreachable. What is the immediate impact on the pods running on the worker node?

What is the purpose of a readiness probe in a Kubernetes pod?

You are writing a Deployment YAML (apps/v1) for a stateless web application. The application should have 3 replicas and use rolling updates with maxSurge=1 and maxUnavailable=0. Which field should you set under spec.strategy?

You run 'kubectl get pods' and see that a pod named 'web-frontend' is in 'Pending' state for more than 5 minutes. What is the most likely cause?

Which of the following is a benefit of container orchestration?

You are asked to deploy a Kubernetes service that exposes a set of pods internally within the cluster only. The service should not be accessible from outside the cluster. Which Service type should you choose?

Which of the following describes the Open Container Initiative (OCI) image specification?

Which TWO of the following are benefits of using a container orchestration platform like Kubernetes? (Select 2)

Which THREE of the following are characteristics of a microservices architecture? (Select 3)

Which component is responsible for running containers on a Kubernetes node?

Which Open Container Initiative (OCI) specification defines the format of container images?

A developer wants to deploy a stateless web application that should scale to 5 replicas. Each replica must be identical and should be automatically replaced if it fails. Which Kubernetes resource should be used?

A pod is in the 'Pending' state. Which of the following is a likely cause?

An administrator runs 'kubectl get pods' and sees that a pod named 'app-pod' is in 'CrashLoopBackOff'. They run 'kubectl logs app-pod' and see a segmentation fault error. What is the most likely cause?

A team wants to deploy a batch job that runs once to process a large dataset. The job should run to completion and then terminate. Which Kubernetes resource should be used?

A Kubernetes administrator needs to restrict inbound traffic to a set of pods. Only pods with the label 'app: frontend' in the same namespace should be allowed to reach the pods on TCP port 8080. Which resource should be used?

A pod has resource requests of 512Mi memory and 500m CPU, and limits of 1Gi memory and 1 CPU. The node has 4Gi memory and 2 CPU cores. If the pod tries to use 700m CPU, what will happen?

A pod uses a ServiceAccount that has a RoleBinding to a Role with 'get', 'list', 'watch' on 'pods'. The pod tries to list pods in the same namespace. Will the request succeed?

Which TWO statements about containers compared to virtual machines are correct? (Select 2)

Which THREE are benefits of using a container orchestration platform? (Select 3)

Which TWO statements about the Container Runtime Interface (CRI) are correct? (Select 2)

What is a primary benefit of using containers over virtual machines?

Which Kubernetes component is responsible for maintaining the desired state of the cluster?

What is the purpose of the Container Runtime Interface (CRI)?

A Pod is stuck in 'Pending' state. Which command is most helpful to diagnose the issue?

You need to run a batch job that processes a queue and then terminates. Which Kubernetes resource should you use?

What is the difference between a liveness probe and a readiness probe?

You want to ensure that a Pod runs on every Node in the cluster. Which resource should you use?

A Service of type ClusterIP is created for a Deployment, but Pods in other namespaces cannot reach it. What is the most likely cause?

In a container image built from a Dockerfile, what is the purpose of the CMD instruction?

You are designing a microservices application. Which of the following is a key principle of microservices architecture?

Which of the following is an example of immutable infrastructure?

Which three of the following are benefits of container orchestration? (Choose three.)

Which two of the following are characteristics of container images built using OCI standards? (Choose two.)

Which of the following is a key benefit of container orchestration?

What is the Container Runtime Interface (CRI)?

Which of the following is a key difference between containers and virtual machines?

A Kubernetes Deployment manages a set of pods. What is the primary purpose of a Deployment?

A pod is stuck in 'Pending' state. Which of the following is a likely cause?

Which command would you run to get a list of all pods in all namespaces?

What is the purpose of a Readiness Probe in a Kubernetes pod?

Which Kubernetes resource should be used to run a one-time task that performs a computation and then exits?

What is the Open Container Initiative (OCI) responsible for?

A microservices application has multiple services that need to discover each other by name. Which Kubernetes object provides built-in service discovery via DNS?

You need to deploy an application that requires exactly one pod per cluster node for logging purposes. Which Kubernetes workload resource should you use?

Which of the following correctly describes the concept of 'immutable infrastructure' in the context of container orchestration?

Which TWO of the following are benefits of using a container orchestration platform like Kubernetes? (Choose two.)

Which THREE are valid container runtimes that implement the Kubernetes CRI? (Choose three.)

Which TWO statements about container images are correct? (Choose two.)

A pod in the 'production' namespace is in a CrashLoopBackOff state. The pod has been running successfully for several days. You run 'kubectl describe pod app-pod -n production' and see the message: 'OOMKilled'. What is the MOST appropriate action to resolve this issue?

Which TWO of the following are benefits of using containers over virtual machines? (Choose 2)

Which TWO of the following are required fields when defining a container in a Kubernetes Pod spec? (Choose 2)

Which THREE of the following are true about the Open Container Initiative (OCI)? (Choose 3)

Which TWO of the following are characteristics of microservices architecture? (Choose 2)

Which TWO of the following correctly describe the difference between Docker Compose and Kubernetes? (Choose 2)

Which THREE of the following are true about the Container Runtime Interface (CRI)? (Choose 3)

Which THREE of the following are core principles of immutable infrastructure? (Choose 3)

Which TWO of the following are true about service discovery in Kubernetes? (Choose 2)

Which TWO of the following are true about container networking basics? (Choose 2)

Which THREE of the following are true about container lifecycle? (Choose 3)