Be able to choose the right workload, Service, and configuration or storage object for a described scenario, and read a Pod spec. The single most important thing: know how Service DNS and namespaces interact, since cross-namespace name resolution is the classic failure point.
Start practicing
Kubernetes Fundamentals — choose a session length
Free · No account required
Domain overview
Kubernetes Fundamentals is the largest KCNA domain, covering cluster architecture, Pods, workloads, Services, namespaces, configuration, storage, and basic scheduling. Questions are scenario-based: you pick the correct resource, explain why a Service name fails to resolve across namespaces, or identify which volume type persists data after Pod deletion. Expect multiple-select items alongside single-answer recall.
Exam objectives
Core objects: Pods, ReplicaSets, Deployments, DaemonSets, StatefulSets, Jobs and CronJobs
Service types ClusterIP, NodePort, LoadBalancer and how selectors map to Pod labels
Namespaces, DNS naming like db-service.backend.svc.cluster.local, and cross-namespace access
ConfigMaps and Secrets for configuration, plus volume types including hostPath and emptyDir
Assuming a Service in another namespace resolves by short name; DNS requires the namespace-qualified form unless both Pods share a namespace
Confusing hostPath and emptyDir: hostPath writes to the node and survives Pod deletion, emptyDir is deleted with the Pod
Using a Secret for non-sensitive config or a ConfigMap for passwords, and forgetting Secrets are base64-encoded, not encrypted by default
Click any question to see the full explanation and answer options, or start a focused practice session above.
A developer deploys a pod that continuously restarts. 'kubectl describe pod' shows the container exits with code 137. What is the most likely cause?
2A pod is stuck in 'Pending' state. 'kubectl describe pod' shows '0/4 nodes are available: 4 node(s) had taint {node.kubernetes.io/unreachable: }, that the pod didn't tolerate.' What is the most likely cause?
3A team wants to minimize downtime during a Deployment rollout. Which strategy ensures that new pods are created before old pods are terminated?
4A developer creates a pod that needs to securely access a database password stored in the cluster. Which Kubernetes resource should be used to inject the password as an environment variable?
5An administrator runs 'kubectl get pods' and sees that a pod is in 'Pending' state. 'kubectl describe pod' shows the event: '0/4 nodes are available: 1 node had taints that the pod didn't tolerate, 3 nodes had insufficient memory'. What is the most likely issue?
6A cluster has a node with the taint 'node-role.kubernetes.io/control-plane:NoSchedule'. A pod must be scheduled on this node for a special workload. Which action is required?
7Which TWO statements about Kubernetes namespaces are true?
8Which THREE of the following are valid ways to expose a set of pods as a network service in Kubernetes?
9Refer to the exhibit. A pod 'my-pod' shows repeated 'BackOff' events after the container starts. Which is the most likely cause?
10A development team deploys a microservice that crashes every few minutes. The deployment uses a single replica, and the pod restarts repeatedly. Which Kubernetes feature should be enabled to ensure the service remains available during failures?
11A DevOps engineer needs to expose a set of pods running an HTTP API to external clients. The pods are stateless and should be load-balanced. Which Kubernetes resource should they use?
12An administrator notices that a pod in a Deployment is stuck in CrashLoopBackOff. The pod logs show 'Error: failed to start container: exec: "app": executable file not found in $PATH'. What is the most likely cause?
13A team uses a Deployment with 3 replicas and a RollingUpdate strategy. They update the container image. During the update, one of the new pods fails to start. What will happen by default?
14A company wants to ensure that a database pod runs on a node with SSD storage. How should this be achieved?
15Which TWO statements about Kubernetes Services are correct?
16Which THREE are valid ways to provide configuration data to a pod in Kubernetes?
17A team observes that a Pod is stuck in CrashLoopBackOff. The Pod runs a single container with an entrypoint that exits with non-zero code after a few seconds. The team wants to inspect the container's logs to understand why it is crashing. Which command should they use?
18A developer wants to run a one-time batch job that processes a queue and then terminates. Which Kubernetes resource should they use?
19An application running in a Kubernetes cluster needs to securely access a third-party API. The API key must be stored in the cluster and mounted into the Pod as an environment variable. Which is the best practice?
20A Pod has a container that needs to write logs to a file. The administrator wants the logs to persist even if the container restarts. What is the simplest solution?
21A team is designing a Kubernetes cluster for a production workload that requires high availability. They have three worker nodes in different availability zones. Which statement about scheduling Pods is correct?
22Drag and drop the steps to set up a Kubernetes cluster using kubeadm into the correct order.
23Drag and drop the steps to create a Kubernetes Namespace and deploy an application into it into the correct order.
24Match each cloud native concept to its definition.
25Which Kubernetes control plane component is responsible for storing the cluster state and configuration data?
26What is the primary purpose of a Kubernetes Service object?
27You have a Deployment named 'web-app' with 3 replicas. You need to scale it to 5 replicas. Which kubectl command should you use?
28You need to run a batch job that processes data and then exits. Which Kubernetes resource type is most appropriate for this workload?
29A pod is stuck in 'Pending' state. Which of the following is NOT a common cause for a pod to remain Pending?
30What is the smallest deployable unit in Kubernetes?
31Which component is responsible for ensuring that containers are running as specified in a Pod's specification on a node?
32You need to store a database password securely and expose it to a Pod as an environment variable. Which Kubernetes resource should you use?
33You have a Deployment with image: myapp:v1. You update the image to myapp:v2 using 'kubectl set image deployment/myapp myapp=myapp:v2'. The rollout status shows 'Waiting for rollout to finish: 0 out of 3 new replicas have been updated...'. What is the most likely cause of this behavior?
34Which command would you use to view the logs of a container named 'nginx' in a Pod named 'web-pod'?
35Which THREE of the following are valid use cases for Kubernetes Namespaces? (Select 3)
36Which TWO of the following statements about Kubernetes Deployments are correct? (Select 2)
37What is the primary purpose of Kubernetes?
38Which component of the Kubernetes control plane is responsible for persisting the cluster state?
39A developer wants to expose a set of pods running a web application internally within the cluster using a stable IP address. Which Kubernetes resource should they create?
40A pod is stuck in Pending state. Which of the following is the MOST likely reason?
41What does the 'kubectl get pods' command display?
42A cluster administrator notices that a Deployment's pods are not receiving traffic as expected. The Service selector matches the pod labels. What is a possible cause?
43Which Kubernetes resource can be used to assign a pod to a specific node?
44What is the function of kube-proxy on a worker node?
45Which command is used to view the logs of a pod named 'web-pod'?
46A pod has both resource requests and limits defined. The container is using more CPU than the request but less than the limit. What will happen?
47Which two components are part of the Kubernetes worker node? (Choose two.)
48Which two scenarios would benefit from using a StatefulSet instead of a Deployment? (Choose two.)
49Which component of the Kubernetes control plane stores the cluster state?
50A developer creates a Deployment with 'replicas: 3'. After applying the manifest, only 2 pods are running. Which command would help identify why the third pod was not created?
51Which resource provides stable network endpoints to a set of pods, regardless of pod IP changes?
52A pod in the 'default' namespace cannot reach a pod in the 'backend' namespace by service name 'db-service'. Both namespaces exist and the service is running. What is the most likely cause?
53Which kubectl command is used to apply a manifest file to create or update resources?
54A Deployment is configured with 'strategy.type: RollingUpdate' and 'strategy.rollingUpdate.maxUnavailable: 0'. What is the effect during a rolling update?
55What is the role of kube-scheduler in Kubernetes?
56Which of the following is the smallest deployable unit in Kubernetes?
57A pod has a liveness probe that returns failure. What action will Kubernetes take?
58You have a YAML manifest for a Deployment with 'apiVersion: extensions/v1beta1'. When you run 'kubectl apply -f manifest.yaml', you get an error. What is the most likely cause?
59Which Kubernetes object is used to store non-sensitive configuration data that can be consumed by pods?
60Which TWO components are part of the Kubernetes worker node?
61Which THREE of the following are valid Kubernetes resource types?
62Which TWO statements about Namespaces are correct?
63What is the primary purpose of the kube-scheduler in a Kubernetes cluster?
64Which Kubernetes object provides stable network endpoints and load balancing for a set of pods?
65What is the smallest deployable unit in Kubernetes?
66A pod in the 'production' namespace is in a CrashLoopBackOff state. The pod has been running successfully for several days. You run 'kubectl describe pod app-pod -n production' and see the message: 'OOMKilled'. What is the MOST appropriate action to resolve this issue?
67Which component is responsible for ensuring that the containers in a pod are running as specified?
68You have a Deployment that manages 3 replicas of a web application. You want to perform a rolling update with zero downtime. Which kubectl command should you use?
69A user reports that they can access a service by its ClusterIP but not by its DNS name from within the cluster. What is the most likely cause?
70What is the role of etcd in a Kubernetes cluster?
71Which of the following is a correct YAML structure for a Service of type ClusterIP?
72You want to run a batch job that processes a queue and then terminates. Which Kubernetes resource should you use?
73A pod is stuck in the 'Pending' state. Which command would you use to get more details about why the pod cannot be scheduled?
74Which TWO of the following are responsibilities of the kube-controller-manager? (Select 2)
75Which THREE of the following are valid ways to pass configuration data to a container in a pod? (Select 3)
76Which TWO statements are true about Kubernetes namespaces? (Select 2)
77Which component is the primary entry point for all administrative tasks and API requests in a Kubernetes control plane?
78What is the smallest deployable unit in Kubernetes that can be created, scheduled, and managed?
79A Pod has been in 'Pending' state for an unusual amount of time. Which of the following is a likely cause?
80Which Kubernetes object provides stable network endpoints and load balancing for a set of Pods?
81A developer wants to run a stateless web application with 5 replicas and ensure that when a new version is released, Pods are updated one by one with no downtime. Which Kubernetes resource is best suited?
82You have a web application that needs to read configuration from a file and also access a database password. Which combination of resources should you use to manage these configurations securely?
83A Pod is in 'CrashLoopBackOff' state. You run 'kubectl logs <pod>' and see an error that the application cannot bind to port 8080 because the port is already in use. What is the most likely cause?
84Which command would you use to view the current state of all Pods in the default namespace?
85You want to isolate a team's workloads within a Kubernetes cluster so that they cannot see or access resources from other teams. Which feature should you use?
86A Deployment has a strategy of RollingUpdate with maxSurge=1 and maxUnavailable=0. The Deployment manages 3 replicas. The image is updated. What happens during the update?
87Which component runs on each worker node and ensures that containers are running as specified in the Pod spec?
88Which TWO of the following are true about Kubernetes Services? (Select 2)
89Which THREE of the following are valid reasons to use a StatefulSet instead of a Deployment? (Select 3)
90Which TWO of the following components are part of the Kubernetes control plane? (Select 2)
91Which Kubernetes component is responsible for ensuring that the desired number of pod replicas is running in the cluster?
92What is the purpose of a Service in Kubernetes?
93Which kubectl command would you use to view the logs of a specific pod?
94A user creates a Deployment with 'replicas: 3'. After applying the manifest, only 2 pods are running. What is the most likely cause?
95Which Kubernetes object is used to store non-sensitive configuration data that can be consumed by pods?
96A pod is stuck in 'Pending' state. After running 'kubectl describe pod', you see the event: '0/3 nodes are available: 3 Insufficient cpu'. What is the most likely cause?
97Which field in a Deployment YAML specifies the number of pod replicas?
98A user wants to run a one-time batch job that runs to completion. Which Kubernetes resource should they use?
99A pod has resource requests set to 'cpu: 500m' and 'memory: 256Mi'. The node has 2 CPU cores and 4Gi memory. How many pods with the same resource requests can be scheduled on that node, assuming no other pods?
100Which of the following kubectl commands would you use to apply a manifest file and also save it for later updates?
101Which TWO of the following are control plane components? (Select TWO)
102Which TWO of the following are true about Pod resource limits? (Select TWO)
103Which component of the control plane is responsible for persisting the entire cluster state?
104A Deployment named 'web-app' is configured with replicas: 3. You update the container image. Which Kubernetes object directly manages the pods during the rolling update?
105Which kubectl command is used to view detailed information about a Kubernetes resource?
106What is the smallest deployable unit in Kubernetes that can be created and managed?
107A Service of type ClusterIP has been created, but pods in the same namespace cannot reach it by its DNS name. The Service selector matches the pods. What is a likely cause?
108Which component on each worker node is responsible for ensuring that containers are running as specified in the Pod manifest?
109You need to store a sensitive database password in Kubernetes. Which resource should you use?
110What is the purpose of a Namespace in Kubernetes?
111You create a Pod with a liveness probe that uses an HTTP GET on port 8080, path /healthz. The probe fails after the container starts. What will happen to the Pod?
112Which API version is correct for a Deployment in modern Kubernetes (v1.29+)?
113Which two components are part of the Kubernetes control plane? (Select two.)
114Which three of the following are true about Services in Kubernetes? (Select three.)
115Which two of the following are valid ways to expose a Pod's container port to other resources? (Select two.)
116Which component of the Kubernetes control plane is responsible for storing the cluster state?
117Which kubectl command would you use to view detailed information about a pod named 'web-pod' in the 'default' namespace?
118A Deployment named 'app-deploy' is configured with strategy type: RollingUpdate. You want to update the container image to a new version. What kubectl command should you use?
119Which Kubernetes object provides a stable IP address and DNS name to access a set of pods, and can perform load balancing?
120A user creates a Pod with a PersistentVolumeClaim (PVC) that requests 5Gi of storage. The cluster has two PersistentVolumes (PVs): PV1 (3Gi, AccessModes: ReadWriteOnce) and PV2 (10Gi, AccessModes: ReadOnlyMany). The PVC specifies storageClassName: "" and AccessModes: ReadWriteOnce. Which PV will bind to the PVC?
121You have a Deployment that must run exactly one replica on each node in the cluster for logging purposes. Which Kubernetes resource should you use?
122What is the primary purpose of a liveness probe in a container?
123You need to provide configuration data as environment variables to a pod, but the data is not sensitive. Which object should you use?
124A pod in the 'default' namespace has the following YAML snippet: securityContext: runAsUser: 1000 runAsGroup: 3000 fsGroup: 2000 What is the effect of the fsGroup field?
125Which kubectl command is used to see the logs of a container in a pod?
126A user runs 'kubectl create deployment my-deploy --image=nginx' and then wants to scale the deployment to 5 replicas. Which command should they use?
127You create a Service of type NodePort with nodePort: 30080. The cluster's nodes have IP addresses 10.0.0.1 and 10.0.0.2. From outside the cluster, which address and port can you use to access the Service?
128Which two components are part of the Kubernetes worker node? (Select TWO)
129Which three of the following are valid methods to expose a Service to external traffic? (Select THREE)
130Which two of the following are Kubernetes controllers that run inside the kube-controller-manager? (Select TWO)
131Which component is the primary entry point for all administrative tasks and API requests in a Kubernetes cluster?
132What is the purpose of a Kubernetes Service?
133A developer needs to deploy a stateless application with three replicas and ensure that updates are rolled out with zero downtime. Which Kubernetes resource is most appropriate?
134You run 'kubectl get pods' and see a pod with status 'Pending'. Which is the most likely cause?
135Which component runs on every Kubernetes node and ensures that the containers in a pod are running?
136You want to view the logs of a running pod named 'my-pod'. Which kubectl command should you use?
137Which Kubernetes object can be used to store sensitive data, such as passwords or API keys, and inject them into pods?
138Which of the following is true about Kubernetes Namespaces?
139Which two statements correctly describe etcd in a Kubernetes cluster?
140Which three components are part of the Kubernetes control plane?
141Which Kubernetes control plane component is the entry point for all REST API requests?
142A user runs 'kubectl get pods -n default' but receives an error: 'Error from server (Forbidden): pods is forbidden: User cannot list resource pods in API group'. What is the most likely cause?
143A Deployment is configured with 'replicas: 3'. After a node failure, only 2 pods are running. What component ensures that a new pod is scheduled to restore the desired replica count?
144A team wants to deploy a stateful application that requires each pod to have a unique, stable network identity and persistent storage that persists across rescheduling. Which Kubernetes resource is most appropriate?
145A Service of type ClusterIP is created to expose a set of pods. How does the Service achieve load balancing to the pods?
146A pod is stuck in 'Pending' state. 'kubectl describe pod' shows '0/4 nodes are available: 4 Insufficient memory'. What is the most likely cause?
147Which of the following is a correct apiVersion for a Deployment in a modern Kubernetes cluster (v1.19+)?
148A ClusterIP Service named 'db-service' in namespace 'prod' selects pods with label 'app: database'. A pod in the same cluster needs to reach this service using DNS. What is the fully qualified domain name (FQDN) for the service?
149Which of the following is a way to provide configuration data to a pod without baking it into the container image?
150Which TWO components are part of the Kubernetes control plane? (Choose two.)
151Which THREE of the following are valid ways to assign a pod to a specific node? (Choose three.)
152Which TWO of the following are benefits of using a Deployment over managing ReplicaSets directly? (Choose two.)
153Which Kubernetes component is the primary entry point for all administrative tasks and exposes the REST API?
154What is the primary purpose of a Namespace in Kubernetes?
155A Deployment manages ReplicaSets and supports rolling updates. You want to change the container image of a Deployment without downtime. What is the recommended approach?
156Which component runs on every worker node and ensures that containers are running in a Pod as specified in the Pod manifest?
157You have a Pod with a container that runs a web server. The Pod has a memory request of 256Mi and a memory limit of 512Mi. The container attempts to allocate 600Mi of memory. What happens?
158Which resource type provides a stable IP address and DNS name to access a set of Pods, regardless of Pod IP changes?
159You have a ConfigMap named 'app-config' with key 'database.url'. Which environment variable reference in a Pod spec injects this value correctly?
160You notice that a newly created Pod remains in 'Pending' state. Which of the following is the MOST likely cause?
161You create a Deployment with 'replicas: 3' and update the pod template without changing the selector. After the update, you notice that only the new Pods are running, but old Pods have been terminated. What is the default update strategy?
162Which TWO components are part of the Kubernetes control plane? (Select exactly two.)
163Which THREE of the following are valid ways to expose a Service to external traffic? (Select exactly three.)
164Which TWO of the following are correct about the 'kubectl apply' command compared to 'kubectl create'? (Select exactly two.)
165Which Kubernetes component is the primary entry point for all administrative tasks and API requests?
166Which command is used to view detailed information about a specific pod?
167A Deployment manages ReplicaSets. What is the primary benefit of using a Deployment over directly managing ReplicaSets?
168You have a Pod with a container that needs to read sensitive data such as a database password. Which Kubernetes resource should you use to store this data?
169A Pod is stuck in Pending state. Which of the following is the MOST likely cause?
170Which component on a worker node is responsible for enforcing the network rules and implementing Service abstractions?
171A Service of type ClusterIP is created. What is the default behavior of this Service?
172You have a Deployment that manages 3 replicas. You want to perform a rolling update with a maximum of 2 Pods unavailable during the update. Which field should you set in the Deployment spec?
173You run 'kubectl logs my-pod' and see: "Error from server (BadRequest): container "my-container" in pod "my-pod" is waiting to start: PodInitializing". What does this mean?
174You have a Pod that needs to run a one-time batch job to completion. Which resource type should you use?
175Which TWO of the following are responsibilities of the kubelet on a worker node?
176Which TWO of the following are valid ways to expose a Service to external traffic?
177Which Kubernetes control plane component is the primary entry point for all administrative tasks and serves the Kubernetes API?
178Which component runs on every worker node and is responsible for ensuring that containers are running in a pod according to the pod specification?
179You have a Deployment defined with replicas: 3. You run 'kubectl scale deployment my-deployment --replicas=5'. What happens?
180A developer needs to update a running Deployment's container image from 'nginx:1.21' to 'nginx:1.23' with minimal downtime and the ability to roll back if the new version fails. Which kubectl command should be used?
181You want to expose a set of pods running a web application on port 80 internally within the cluster, with a stable IP address, so that other services can reach them. Which Kubernetes resource should you create?
182A DevOps engineer has created a ConfigMap named 'app-config' and wants to use it to set environment variables in a pod. Which field in the pod spec should reference the ConfigMap?
183You notice that a pod is in 'Pending' state for a long time. Which of the following is the most likely cause?
184You create a Deployment with 'replicas: 3' and update the pod template to use a new image. After the rollout, you notice that the new ReplicaSet has 3 pods but they are all failing with 'CrashLoopBackOff'. You want to rollback to the previous working revision. Which command should you run?
185A pod is running but you need to view the contents of a file '/var/log/app.log' inside the container to debug an issue. Which kubectl command allows you to do this without modifying the pod?
186You need to ensure that a pod runs on a specific node that has an SSD. The node has the label 'disktype=ssd'. How should you configure the pod to target this node?
187Which two of the following are benefits of using Kubernetes for container orchestration? (Select TWO.)
188Which three of the following are valid ways to interact with the Kubernetes API? (Select THREE.)
189Which Kubernetes control plane component is responsible for maintaining the desired state of the cluster by running controller loops?
190You need to run a stateless web application with three replicas, and you want to ensure that if a pod fails, it is automatically replaced. Which Kubernetes resource should you use?
191A developer created a Deployment with 5 replicas. After applying the manifest, only 3 pods are Running; the other 2 are Pending. Which is the MOST likely cause?
192What is the primary purpose of a Kubernetes Service?
193You want to view the logs of a container named 'app' inside a pod named 'web-pod-7d4f8'. Which kubectl command should you use?
194A cluster administrator needs to ensure that a Deployment named 'frontend' in namespace 'web' is updated with a new image version using a rolling update strategy. The current deployment has 4 replicas. The administrator runs: kubectl set image deployment/frontend frontend=nginx:1.21 -n web. Which of the following describes the expected behavior?
195Which of the following is a worker node component responsible for ensuring that containers are running in a pod as specified in the pod's spec?
196You need to create a ConfigMap from a file named 'app.properties'. Which kubectl command should you use?
197A pod has resource requests: cpu: 250m, memory: 512Mi and limits: cpu: 500m, memory: 1Gi. If the container tries to use 600m CPU and 700Mi memory, what will happen?
198Which component of the control plane is the only one that directly interacts with etcd?
199You have a Namespace 'team-a' and you want to see all Pods in that namespace, including those that are not ready. Which command should you use?
200Which TWO components are part of the Kubernetes control plane?
201Which TWO of the following are valid ways to expose a Deployment as a Service?
202Which THREE of the following are true about Kubernetes Namespaces?
203A developer wants to deploy a stateless web application that should maintain three running instances at all times. Which Kubernetes resource should they use?
204You need to inspect the logs of a container named 'app' in a pod called 'web-1'. Which kubectl command should you use?
205Which Kubernetes resource provides a stable IP address and DNS name to access a set of pods?
206A pod remains in 'Pending' state. Upon inspecting the pod with 'kubectl describe pod', you see the message '0/1 nodes are available: 1 node(s) had taint {node.kubernetes.io/disk-pressure: }, that the pod didn't tolerate'. What is the most likely cause?
207A container in a pod has been restarted multiple times with 'CrashLoopBackOff' state. What does this indicate?
208In a YAML manifest for a Deployment, which field defines the number of pod replicas?
209A user runs 'kubectl get pods -n production' and sees no output. What is the most likely reason?
210Which component runs on every worker node and is responsible for maintaining the lifecycle of pods?
211You have a ConfigMap named 'app-config' and a Secret named 'db-password'. You want to mount them into a pod. Which statement is correct?
212Which TWO of the following are Kubernetes control plane components?
213Which TWO of the following are true about Kubernetes Pods?
214What is the primary purpose of the Kubernetes control plane component 'kube-apiserver'?
215Which command is used to view detailed information about a specific pod, including events and conditions?
216A Deployment named 'myapp' is managing a ReplicaSet. You need to update the application image to version 2.0. What is the recommended approach?
217You have a pod that needs to securely access a database password. Which Kubernetes resource should you use to store the password?
218Which component runs on every node and is responsible for maintaining network rules that allow communication to Pods from network endpoints?
219A pod is in 'Pending' state for a long time. What is the most likely cause?
220You have two pods in different namespaces that need to communicate using a stable IP address. Which Kubernetes object provides a stable endpoint for a set of pods?
221Which Kubernetes object is used to logically isolate resources within a cluster, such as for separating environments like dev and prod?
222Your application requires persistent storage that must be available across pod restarts and rescheduling. What is the recommended approach?
223A Deployment is configured with 'replicas: 5' and a rolling update strategy. During an update, you notice that the number of available pods drops to 3 momentarily. Which field in the Deployment spec can be adjusted to control the minimum number of pods available during a rolling update?
224A Service of type ClusterIP is not resolving DNS names for pods. The pods are running and can communicate with each other via IP addresses. Which component should be checked first?
225Which TWO of the following are responsibilities of the kube-controller-manager?
226Which THREE of the following are true about Kubernetes labels and selectors?
227Which TWO of the following are characteristics of a Kubernetes Pod?
228Which control plane component is responsible for assigning pods to nodes?
229A developer deploys a pod with the following resource specification: ```yaml resources: requests: memory: "256Mi" limits: memory: "512Mi" ``` The pod is killed with OOMKilled. What is the most likely cause?
230A Deployment is created with `replicas: 3`. After applying the manifest, only 2 pods are running and one is in Pending state. What is the most likely reason?
231An application requires that configuration data be mounted as a file inside the container. The data may change at runtime, and the application should automatically read the updated values without restarting. Which approach should be used?
232Which of the following is NOT a responsibility of the kubelet on a worker node?
233What is the primary purpose of the `kubectl apply` command?
234You need to run a one-time batch job that processes data and then exits. The job should run to completion and not be restarted. Which Kubernetes resource should you use?
235A service of type ClusterIP is created but pods cannot reach it using the service name. The pods are in the same namespace. What is a likely cause?
236Which command would you use to view the logs of a container named 'sidecar' inside a pod named 'app'?
237Which THREE of the following are valid apiVersions for Kubernetes resources?
238Which TWO of the following are functions of the kube-controller-manager?
239Which Kubernetes control plane component is responsible for maintaining the desired state of the cluster by running controllers?
240You want to update a Deployment's container image to v2 and perform a rolling update using the simplest imperative command. Which kubectl command achieves this?
241A pod is stuck in Pending state. You run 'kubectl describe pod' and see the event '0/3 nodes are available: 1 node(s) had taint(s) that the pod didn't tolerate, 2 node(s) had insufficient memory.'. What is the most likely cause?
242Which Kubernetes controller ensures that a specified number of pod replicas are running at all times?
243Which component on a worker node is responsible for enforcing the desired state of pods as defined in the pod specification?
244You need to expose a set of pods running a web application to internal cluster traffic on a stable IP address. Which resource should you create?
245A pod is in CrashLoopBackOff state. 'kubectl logs pod' shows 'Error: cannot connect to database at db-service:5432'. The database Service exists and is reachable from other pods. What is the most likely cause?
246You want to run a batch job that processes data and then terminates. Which Kubernetes resource is best suited for this workload?
247Which TWO of the following are valid Kubernetes resource types that can be used to store configuration data or secrets?
248Which Kubernetes component is responsible for storing the cluster state?
249A developer creates a Deployment with 3 replicas. The developer runs 'kubectl get pods' immediately after creation and sees that only 1 pod is in Running state, and the other 2 are Pending. What is the most likely reason for this?
250A team runs a stateless web application in Kubernetes. They have a Deployment named 'web-app' with 5 replicas. They want to ensure that a Service named 'web-svc' distributes traffic evenly to all healthy pods. Which type of Service should they use?
251An administrator wants to update the image of a Deployment named 'my-app' from 'nginx:1.19' to 'nginx:1.20' with a rolling update strategy. They want to ensure that during the update, the number of unavailable pods never exceeds 1. Which field should they set in the Deployment spec?
252A DevOps engineer has created a ConfigMap named 'app-config' with some configuration data. They want to make that data available as environment variables in a pod. Which field in the pod spec should they use to achieve this?
253A cluster administrator wants to ensure that a specific pod only runs on nodes that have an SSD for local storage. The nodes with SSDs have the label 'disk-type: ssd'. How should the administrator configure the pod to enforce this constraint?
254A pod is experiencing high memory usage. The administrator wants to enforce that the pod is terminated if it exceeds a memory limit and restarted automatically, but also wants to guarantee a minimum amount of memory for the pod. Which resource specification should be used in the container definition?
255You have a Deployment defined with replicas: 5. You run 'kubectl scale deployment myapp --replicas=3'. Which component is responsible for ensuring the actual number of Pods matches the desired 3?
256Which Kubernetes object should you use to store non-sensitive configuration data that can be consumed by Pods as environment variables or mounted files?
257A Pod is in the 'Pending' state. What is the most likely cause?
258Which kubectl command would you use to view the logs of a specific container named 'app' in a multi-container Pod named 'web-pod'?
259You need to run a batch job that processes a queue and then terminates. Which Kubernetes resource is most appropriate?
260Which command creates a Deployment named 'nginx' from the 'nginx:1.19' image?
261Which field in a Pod's container specification defines the minimum amount of CPU guaranteed to the container?
262What is the role of the kubelet on a worker node?
263Which three components are part of the Kubernetes control plane? (Select THREE)
264Which two statements about Pods are true? (Select TWO)
265Which control plane component is responsible for persisting the entire cluster state?
266A developer created a Deployment with image 'myapp:v1' and then ran 'kubectl set image deployment/myapp myapp=myapp:v2'. What is the effect of this command?
267An application requires that a set of Pods each be assigned a unique DNS name that can be used for peer-to-peer communication. Which Kubernetes resource should be used?
268Which Kubernetes object provides a stable IP address and DNS name for a set of Pods?
269You have a Pod that is in 'Pending' state. What is the most likely cause?
270Which kubectl command is used to create or update resources defined in a YAML file?
271Which component runs on every node and is responsible for ensuring that containers are running as specified in Pod manifests?
272You need to store a database password securely and make it available to a Pod as an environment variable. Which Kubernetes resource should you create?
273A Deployment named 'web' has 3 replicas. You run 'kubectl scale deployment web --replicas=5'. What will happen?
274Which TWO statements correctly describe the purpose of etcd in a Kubernetes cluster?
275Which TWO are valid reasons to use a Namespace in Kubernetes?
276Which Kubernetes control plane component acts as the entry point for all administrative tasks and provides the REST API?
277What is the smallest deployable unit in Kubernetes that you can create and manage?
278A developer has created a Deployment with 3 replicas. The application should be reachable from other Pods within the same cluster. Which Kubernetes resource should be used to provide a stable network endpoint?
279You run 'kubectl get pods' and see a Pod in the 'Pending' state. Which of the following is a likely cause?
280A Deployment is configured with 'replicas: 4' and 'strategy.type: RollingUpdate'. You update the container image. What behavior does the Deployment exhibit?
281You need to securely store a database password for use by a Pod. Which Kubernetes resource should you use?
282Which two of the following are valid ways to expose a set of Pods to external traffic?
283Which two of the following are valid ways to set resource constraints on a container in a Pod spec?
284Which three of the following are true about etcd in Kubernetes?
285Which Kubernetes control plane component is responsible for maintaining the desired state of the cluster by running reconciliation loops?
286Which kubectl command would you use to view detailed information about a specific pod, including events and container status?
287You have a Deployment named 'web-app' that manages 3 replicas. You need to update the container image from version 1.0 to 2.0 with zero downtime. Which Kubernetes feature is designed to handle this automatically when you update the Deployment's pod template?
288Which Kubernetes resource provides stable network endpoints for a set of pods, enabling service discovery and load balancing?
289You want to deploy a stateless web application that should maintain 5 running instances at all times. You need to support rolling updates and rollbacks. Which Kubernetes resource is most appropriate?
290Which component runs on every worker node and is responsible for ensuring that containers are running in a pod as specified in the PodSpec?
291Which Kubernetes primitive is the smallest and simplest unit in the Kubernetes object model that you can create or deploy?
292You have a Kubernetes cluster with multiple namespaces. You need to allow communication only from pods with label 'app: frontend' to pods with label 'app: backend' in the same namespace. Which resource should you use?
293You run 'kubectl get pods' and see a pod in 'Pending' state for over 5 minutes. You describe the pod and see '0/1 nodes are available: 1 Insufficient memory'. What is the most likely cause?
294Which TWO of the following are valid uses of Kubernetes Namespaces? (Select 2)
295Which TWO of the following are responsibilities of the kubelet? (Select 2)
296Which Kubernetes component is responsible for maintaining the desired state of the cluster by running controllers?
297Which kubectl command would you use to view the detailed state of a pod named 'web-pod' in the 'default' namespace?
298Which Kubernetes object is used to store non-confidential configuration data that can be consumed by pods?
299You want to expose a set of pods running on node port 30080 to external traffic. Which Service type should you use?
300What is the purpose of a liveness probe in a Kubernetes pod?
Be able to choose the right workload, Service, and configuration or storage object for a described scenario, and read a Pod spec. The single most important thing: know how Service DNS and namespaces interact, since cross-namespace name resolution is the classic failure point.
The Courseiva KCNA question bank contains 300 questions in the Kubernetes Fundamentals domain, covering the 44% of the exam attributed to this domain in the official CNCF blueprint. Click any question to see the full explanation and answer breakdown.
Start with a 10-question focused session to identify your baseline accuracy in this domain. Read every explanation — even for questions you answer correctly — to understand the reasoning. Once you score consistently above 80%, move to a 20–30 question session to confirm depth before moving to the next domain.
Yes — the session launcher on this page draws questions exclusively from the Kubernetes Fundamentals domain. Choose 10, 20, 30, or 50 questions for a focused session, or click individual questions to review them one by one.
Save your results, see per-domain analytics, and get readiness scores — free, for every certification.
Sign Up FreeFree forever · Every certification included