Practice KCNA Kubernetes Fundamentals questions with full explanations on every answer.
Start practicing
Kubernetes Fundamentals — choose a session length
Free · No account required
Click any question to see the full explanation and answer options, or start a focused practice session above.
A developer deploys a pod that continuously restarts. 'kubectl describe pod' shows the container exits with code 137. What is the most likely cause?
2An application requires a unique identifier per replica, stored in an environment variable. Which Kubernetes resource should be used to inject this identifier into each pod without manual updates?
3A pod is stuck in 'Pending' state. 'kubectl describe pod' shows '0/4 nodes are available: 4 node(s) had taint {node.kubernetes.io/unreachable: }, that the pod didn't tolerate.' What is the most likely cause?
4A team wants to minimize downtime during a Deployment rollout. Which strategy ensures that new pods are created before old pods are terminated?
5A pod in a ReplicaSet is failing with 'CrashLoopBackOff'. 'kubectl logs pod' shows 'Error: listen tcp :8080: bind: address already in use'. What is the most likely cause?
6Which TWO of the following are valid ways to expose a set of pods as a network service within a Kubernetes cluster?
7Which THREE of the following are required for a Kubernetes pod to be considered healthy and ready to serve traffic?
8A team notices that a pod remains in 'CrashLoopBackOff' state after deployment. The application logs show 'Error: unable to bind to port 8080'. What is the most likely cause?
9A DevOps engineer wants to ensure that a critical application pod is rescheduled on a different node if its current node fails. The pod should be scheduled with a preference for nodes in a specific availability zone but can run elsewhere if needed. Which scheduling mechanism should be used?
10A developer creates a pod that needs to securely access a database password stored in the cluster. Which Kubernetes resource should be used to inject the password as an environment variable?
11An administrator runs 'kubectl get pods' and sees that a pod is in 'Pending' state. 'kubectl describe pod' shows the event: '0/4 nodes are available: 1 node had taints that the pod didn't tolerate, 3 nodes had insufficient memory'. What is the most likely issue?
12A cluster has a node with the taint 'node-role.kubernetes.io/control-plane:NoSchedule'. A pod must be scheduled on this node for a special workload. Which action is required?
13Which TWO statements about Kubernetes namespaces are true?
14Which THREE of the following are valid ways to expose a set of pods as a network service in Kubernetes?
15Refer to the exhibit. A pod is created with the above manifest. The container runs nginx listening on port 80, but the liveness probe is configured to check port 8080. What will happen?
16Refer to the exhibit. A pod 'my-pod' shows repeated 'BackOff' events after the container starts. Which is the most likely cause?
17A development team deploys a microservice that crashes every few minutes. The deployment uses a single replica, and the pod restarts repeatedly. Which Kubernetes feature should be enabled to ensure the service remains available during failures?
18A DevOps engineer needs to expose a set of pods running an HTTP API to external clients. The pods are stateless and should be load-balanced. Which Kubernetes resource should they use?
19An administrator notices that a pod in a Deployment is stuck in CrashLoopBackOff. The pod logs show 'Error: failed to start container: exec: "app": executable file not found in $PATH'. What is the most likely cause?
20A team uses a Deployment with 3 replicas and a RollingUpdate strategy. They update the container image. During the update, one of the new pods fails to start. What will happen by default?
21A company wants to ensure that a database pod runs on a node with SSD storage. How should this be achieved?
22Which TWO statements about Kubernetes Services are correct?
23Which THREE are valid ways to provide configuration data to a pod in Kubernetes?
24A StatefulSet named 'web' with 3 replicas is deployed in the 'production' namespace. The first two pods are running, but the third pod 'web-2' is pending with the error shown. What is the most likely cause?
25A team observes that a Pod is stuck in CrashLoopBackOff. The Pod runs a single container with an entrypoint that exits with non-zero code after a few seconds. The team wants to inspect the container's logs to understand why it is crashing. Which command should they use?
26Refer to the exhibit. The nginx Pod is created, but the Pod never becomes Ready. The container starts and runs. What is the most likely reason?
27A developer wants to run a one-time batch job that processes a queue and then terminates. Which Kubernetes resource should they use?
28An application running in a Kubernetes cluster needs to securely access a third-party API. The API key must be stored in the cluster and mounted into the Pod as an environment variable. Which is the best practice?
29A Pod has a container that needs to write logs to a file. The administrator wants the logs to persist even if the container restarts. What is the simplest solution?
30A team is designing a Kubernetes cluster for a production workload that requires high availability. They have three worker nodes in different availability zones. Which statement about scheduling Pods is correct?
31Drag and drop the steps to set up a Kubernetes cluster using kubeadm into the correct order.
32Drag and drop the steps to create a Kubernetes Namespace and deploy an application into it into the correct order.
33Match each Kubernetes scheduler concept to its description.
34Match each cloud native concept to its definition.
35A pod in the 'production' namespace is in a CrashLoopBackOff state. The pod has been running successfully for several days. You run 'kubectl describe pod app-pod -n production' and see the message: 'OOMKilled'. What is the MOST appropriate action to resolve this issue?
36Which Kubernetes control plane component is responsible for storing the cluster state and configuration data?
37What is the primary purpose of a Kubernetes Service object?
38You have a Deployment named 'web-app' with 3 replicas. You need to scale it to 5 replicas. Which kubectl command should you use?
39You need to run a batch job that processes data and then exits. Which Kubernetes resource type is most appropriate for this workload?
40A pod is stuck in 'Pending' state. Which of the following is NOT a common cause for a pod to remain Pending?
41What is the smallest deployable unit in Kubernetes?
42You deploy a new version of your application by updating the container image in the Deployment manifest. The rollout seems to be progressing, but after a few minutes you notice that the new Pods are failing and the old Pods are still running. What is the most likely reason?
43Which component is responsible for ensuring that containers are running as specified in a Pod's specification on a node?
44You need to store a database password securely and expose it to a Pod as an environment variable. Which Kubernetes resource should you use?
45You have a Deployment with image: myapp:v1. You update the image to myapp:v2 using 'kubectl set image deployment/myapp myapp=myapp:v2'. The rollout status shows 'Waiting for rollout to finish: 0 out of 3 new replicas have been updated...'. What is the most likely cause of this behavior?
46Which command would you use to view the logs of a container named 'nginx' in a Pod named 'web-pod'?
47Which TWO of the following are valid use cases for Kubernetes Namespaces? (Select 2)
48Which TWO of the following statements about Kubernetes Deployments are correct? (Select 2)
49Which THREE of the following are valid attributes in a Kubernetes Pod specification? (Select 3)
50What is the primary purpose of Kubernetes?
51Which component of the Kubernetes control plane is responsible for persisting the cluster state?
52A developer wants to expose a set of pods running a web application internally within the cluster using a stable IP address. Which Kubernetes resource should they create?
53A pod is stuck in Pending state. Which of the following is the MOST likely reason?
54What does the 'kubectl get pods' command display?
55A cluster administrator notices that a Deployment's pods are not receiving traffic as expected. The Service selector matches the pod labels. What is a possible cause?
56Which Kubernetes resource can be used to assign a pod to a specific node?
57What is the function of kube-proxy on a worker node?
58A developer creates a Deployment with the following YAML snippet: ```yaml apiVersion: apps/v1 kind: Deployment spec: replicas: 3 selector: matchLabels: app: frontend template: metadata: labels: app: frontend spec: containers: - name: nginx image: nginx:1.21 ``` What will happen if the label 'app: frontend' is omitted from the pod template's metadata?
59Which command is used to view the logs of a pod named 'web-pod'?
60What is the smallest deployable unit in Kubernetes?
61A pod has both resource requests and limits defined. The container is using more CPU than the request but less than the limit. What will happen?
62Which two components are part of the Kubernetes worker node? (Choose two.)
63Which three of the following are valid methods to create or update resources in Kubernetes? (Choose three.)
64Which two scenarios would benefit from using a StatefulSet instead of a Deployment? (Choose two.)
65What is the primary purpose of Kubernetes?
66Which component of the Kubernetes control plane stores the cluster state?
67A developer creates a Deployment with 'replicas: 3'. After applying the manifest, only 2 pods are running. Which command would help identify why the third pod was not created?
68Which resource provides stable network endpoints to a set of pods, regardless of pod IP changes?
69A pod in the 'default' namespace cannot reach a pod in the 'backend' namespace by service name 'db-service'. Both namespaces exist and the service is running. What is the most likely cause?
70Which kubectl command is used to apply a manifest file to create or update resources?
71A Deployment is configured with 'strategy.type: RollingUpdate' and 'strategy.rollingUpdate.maxUnavailable: 0'. What is the effect during a rolling update?
72What is the role of kube-scheduler in Kubernetes?
73Which of the following is the smallest deployable unit in Kubernetes?
74A pod has a liveness probe that returns failure. What action will Kubernetes take?
75You have a YAML manifest for a Deployment with 'apiVersion: extensions/v1beta1'. When you run 'kubectl apply -f manifest.yaml', you get an error. What is the most likely cause?
76Which Kubernetes object is used to store non-sensitive configuration data that can be consumed by pods?
77Which TWO components are part of the Kubernetes worker node?
78Which THREE of the following are valid Kubernetes resource types?
79Which TWO statements about Namespaces are correct?
80What is the primary purpose of the kube-scheduler in a Kubernetes cluster?
81Which Kubernetes object provides stable network endpoints and load balancing for a set of pods?
82What is the smallest deployable unit in Kubernetes?
83A pod in the 'production' namespace is in a CrashLoopBackOff state. The pod has been running successfully for several days. You run 'kubectl describe pod app-pod -n production' and see the message: 'OOMKilled'. What is the MOST appropriate action to resolve this issue?
84Which component is responsible for ensuring that the containers in a pod are running as specified?
85You have a Deployment that manages 3 replicas of a web application. You want to perform a rolling update with zero downtime. Which kubectl command should you use?
86A user reports that they can access a service by its ClusterIP but not by its DNS name from within the cluster. What is the most likely cause?
87What is the role of etcd in a Kubernetes cluster?
88Which of the following is a correct YAML structure for a Service of type ClusterIP?
89A Deployment named 'web-app' has been running with 3 replicas. After a configuration change, you notice that only 2 pods are ready. You run 'kubectl describe deployment web-app' and see 'Replicas: 3 desired | 3 total | 3 up-to-date | 2 available'. What is the most likely cause?
90You want to run a batch job that processes a queue and then terminates. Which Kubernetes resource should you use?
91A pod is stuck in the 'Pending' state. Which command would you use to get more details about why the pod cannot be scheduled?
92Which TWO of the following are responsibilities of the kube-controller-manager? (Select 2)
93Which THREE of the following are valid ways to pass configuration data to a container in a pod? (Select 3)
94Which TWO statements are true about Kubernetes namespaces? (Select 2)
95Which component is the primary entry point for all administrative tasks and API requests in a Kubernetes control plane?
96What is the smallest deployable unit in Kubernetes that can be created, scheduled, and managed?
97You need to update a Deployment's container image from nginx:1.14 to nginx:1.16 and ensure zero downtime. Which kubectl command should you use?
98A Pod has been in 'Pending' state for an unusual amount of time. Which of the following is a likely cause?
99Which Kubernetes object provides stable network endpoints and load balancing for a set of Pods?
100A developer wants to run a stateless web application with 5 replicas and ensure that when a new version is released, Pods are updated one by one with no downtime. Which Kubernetes resource is best suited?
101You have a web application that needs to read configuration from a file and also access a database password. Which combination of resources should you use to manage these configurations securely?
102A Pod is in 'CrashLoopBackOff' state. You run 'kubectl logs <pod>' and see an error that the application cannot bind to port 8080 because the port is already in use. What is the most likely cause?
103Which command would you use to view the current state of all Pods in the default namespace?
104You want to isolate a team's workloads within a Kubernetes cluster so that they cannot see or access resources from other teams. Which feature should you use?
105A Deployment has a strategy of RollingUpdate with maxSurge=1 and maxUnavailable=0. The Deployment manages 3 replicas. The image is updated. What happens during the update?
106Which component runs on each worker node and ensures that containers are running as specified in the Pod spec?
107Which TWO of the following are true about Kubernetes Services? (Select 2)
108Which THREE of the following are valid reasons to use a StatefulSet instead of a Deployment? (Select 3)
109Which TWO of the following components are part of the Kubernetes control plane? (Select 2)
110Which Kubernetes component is responsible for ensuring that the desired number of pod replicas is running in the cluster?
111What is the purpose of a Service in Kubernetes?
112Which kubectl command would you use to view the logs of a specific pod?
113A user creates a Deployment with 'replicas: 3'. After applying the manifest, only 2 pods are running. What is the most likely cause?
114Which Kubernetes object is used to store non-sensitive configuration data that can be consumed by pods?
115A pod is stuck in 'Pending' state. After running 'kubectl describe pod', you see the event: '0/3 nodes are available: 3 Insufficient cpu'. What is the most likely cause?
116Which field in a Deployment YAML specifies the number of pod replicas?
117A user wants to run a one-time batch job that runs to completion. Which Kubernetes resource should they use?
118A developer creates a Service of type ClusterIP in namespace 'default'. They attempt to reach the Service from another pod in the same namespace using the Service name 'my-svc'. The connection fails. What is the most likely cause?
119Which of the following is a correct way to assign a pod to a specific node using a nodeSelector?
120A pod has resource requests set to 'cpu: 500m' and 'memory: 256Mi'. The node has 2 CPU cores and 4Gi memory. How many pods with the same resource requests can be scheduled on that node, assuming no other pods?
121Which of the following kubectl commands would you use to apply a manifest file and also save it for later updates?
122Which TWO of the following are control plane components? (Select TWO)
123Which THREE of the following are valid types of Kubernetes Services? (Select THREE)
124Which TWO of the following are true about Pod resource limits? (Select TWO)
125What is the primary purpose of Kubernetes?
126Which component of the control plane is responsible for persisting the entire cluster state?
127A Deployment named 'web-app' is configured with replicas: 3. You update the container image. Which Kubernetes object directly manages the pods during the rolling update?
128You have a pod that is scheduled on a node with insufficient memory. The pod's manifest does not have a memory limit, but the node is under memory pressure. What is likely to happen to the pod?
129Which kubectl command is used to view detailed information about a Kubernetes resource?
130What is the smallest deployable unit in Kubernetes that can be created and managed?
131A Service of type ClusterIP has been created, but pods in the same namespace cannot reach it by its DNS name. The Service selector matches the pods. What is a likely cause?
132Which component on each worker node is responsible for ensuring that containers are running as specified in the Pod manifest?
133You need to store a sensitive database password in Kubernetes. Which resource should you use?
134What is the purpose of a Namespace in Kubernetes?
135You create a Pod with a liveness probe that uses an HTTP GET on port 8080, path /healthz. The probe fails after the container starts. What will happen to the Pod?
136Which API version is correct for a Deployment in modern Kubernetes (v1.29+)?
137Which two components are part of the Kubernetes control plane? (Select two.)
138Which three of the following are true about Services in Kubernetes? (Select three.)
139Which two of the following are valid ways to expose a Pod's container port to other resources? (Select two.)
140Which component of the Kubernetes control plane is responsible for storing the cluster state?
141Which kubectl command would you use to view detailed information about a pod named 'web-pod' in the 'default' namespace?
142A Deployment named 'app-deploy' is configured with strategy type: RollingUpdate. You want to update the container image to a new version. What kubectl command should you use?
143Which Kubernetes object provides a stable IP address and DNS name to access a set of pods, and can perform load balancing?
144A user creates a Pod with a PersistentVolumeClaim (PVC) that requests 5Gi of storage. The cluster has two PersistentVolumes (PVs): PV1 (3Gi, AccessModes: ReadWriteOnce) and PV2 (10Gi, AccessModes: ReadOnlyMany). The PVC specifies storageClassName: "" and AccessModes: ReadWriteOnce. Which PV will bind to the PVC?
145You have a Deployment that must run exactly one replica on each node in the cluster for logging purposes. Which Kubernetes resource should you use?
146What is the primary purpose of a liveness probe in a container?
147You need to provide configuration data as environment variables to a pod, but the data is not sensitive. Which object should you use?
148A pod in the 'default' namespace has the following YAML snippet: securityContext: runAsUser: 1000 runAsGroup: 3000 fsGroup: 2000 What is the effect of the fsGroup field?
149Which kubectl command is used to see the logs of a container in a pod?
150A user runs 'kubectl create deployment my-deploy --image=nginx' and then wants to scale the deployment to 5 replicas. Which command should they use?
151You create a Service of type NodePort with nodePort: 30080. The cluster's nodes have IP addresses 10.0.0.1 and 10.0.0.2. From outside the cluster, which address and port can you use to access the Service?
152Which two components are part of the Kubernetes worker node? (Select TWO)
153Which three of the following are valid methods to expose a Service to external traffic? (Select THREE)
154Which two of the following are Kubernetes controllers that run inside the kube-controller-manager? (Select TWO)
155Which component is the primary entry point for all administrative tasks and API requests in a Kubernetes cluster?
156What is the purpose of a Kubernetes Service?
157A developer needs to deploy a stateless application with three replicas and ensure that updates are rolled out with zero downtime. Which Kubernetes resource is most appropriate?
158You run 'kubectl get pods' and see a pod with status 'Pending'. Which is the most likely cause?
159Which command creates a Deployment named 'nginx-deployment' from the image 'nginx:1.25' and exposes it on port 80?
160A pod is running a Java application that occasionally leaks memory. After a few hours, 'kubectl describe pod' shows the container exited with OOMKilled. You want to automatically restart the container but ensure the application has enough memory. What should you do?
161Which component runs on every Kubernetes node and ensures that the containers in a pod are running?
162You want to view the logs of a running pod named 'my-pod'. Which kubectl command should you use?
163A Kubernetes cluster has multiple worker nodes. You create a Pod without any node selector. The scheduler places the pod on a node, but the pod remains in 'Pending' state. 'kubectl describe pod' shows '0/1 nodes are available: 1 node had taint {node-role.kubernetes.io/master: }, that the pod didn't tolerate'. What does this indicate?
164Which Kubernetes object can be used to store sensitive data, such as passwords or API keys, and inject them into pods?
165You create a Service of type ClusterIP in the 'default' namespace. You try to reach the Service from a pod in the 'production' namespace using the service name. The connection fails. What is the most likely reason?
166Which of the following is true about Kubernetes Namespaces?
167Which two statements correctly describe etcd in a Kubernetes cluster?
168Which three components are part of the Kubernetes control plane?
169Which two commands are valid for viewing information about pods in a namespace named 'production'?
170What is the primary purpose of Kubernetes?
171Which Kubernetes control plane component is the entry point for all REST API requests?
172A user runs 'kubectl get pods -n default' but receives an error: 'Error from server (Forbidden): pods is forbidden: User cannot list resource pods in API group'. What is the most likely cause?
173A Deployment is configured with 'replicas: 3'. After a node failure, only 2 pods are running. What component ensures that a new pod is scheduled to restore the desired replica count?
174A team wants to deploy a stateful application that requires each pod to have a unique, stable network identity and persistent storage that persists across rescheduling. Which Kubernetes resource is most appropriate?
175A Service of type ClusterIP is created to expose a set of pods. How does the Service achieve load balancing to the pods?
176A pod is stuck in 'Pending' state. 'kubectl describe pod' shows '0/4 nodes are available: 4 Insufficient memory'. What is the most likely cause?
177Which of the following is a correct apiVersion for a Deployment in a modern Kubernetes cluster (v1.19+)?
178A user wants to view the logs from a container named 'app' inside a multi-container pod named 'web'. Which kubectl command should be used?
179What is the smallest deployable unit in Kubernetes?
180A ClusterIP Service named 'db-service' in namespace 'prod' selects pods with label 'app: database'. A pod in the same cluster needs to reach this service using DNS. What is the fully qualified domain name (FQDN) for the service?
181Which of the following is a way to provide configuration data to a pod without baking it into the container image?
182Which TWO components are part of the Kubernetes control plane? (Choose two.)
183Which THREE of the following are valid ways to assign a pod to a specific node? (Choose three.)
184Which TWO of the following are benefits of using a Deployment over managing ReplicaSets directly? (Choose two.)
185Which Kubernetes component is the primary entry point for all administrative tasks and exposes the REST API?
186What is the primary purpose of a Namespace in Kubernetes?
187A Deployment manages ReplicaSets and supports rolling updates. You want to change the container image of a Deployment without downtime. What is the recommended approach?
188Which component runs on every worker node and ensures that containers are running in a Pod as specified in the Pod manifest?
189A Pod has two containers. You need to see the logs of the second container named 'sidecar'. Which kubectl command should you use?
190You have a Deployment named 'web-app' running three replicas. You need to scale it to five replicas. Which kubectl command accomplishes this?
191You have a Pod with a container that runs a web server. The Pod has a memory request of 256Mi and a memory limit of 512Mi. The container attempts to allocate 600Mi of memory. What happens?
192Which resource type provides a stable IP address and DNS name to access a set of Pods, regardless of Pod IP changes?
193You have a ConfigMap named 'app-config' with key 'database.url'. Which environment variable reference in a Pod spec injects this value correctly?
194What is the smallest deployable unit in Kubernetes that can be created and managed?
195You notice that a newly created Pod remains in 'Pending' state. Which of the following is the MOST likely cause?
196You create a Deployment with 'replicas: 3' and update the pod template without changing the selector. After the update, you notice that only the new Pods are running, but old Pods have been terminated. What is the default update strategy?
197Which TWO components are part of the Kubernetes control plane? (Select exactly two.)
198Which THREE of the following are valid ways to expose a Service to external traffic? (Select exactly three.)
199Which TWO of the following are correct about the 'kubectl apply' command compared to 'kubectl create'? (Select exactly two.)
200Which Kubernetes component is the primary entry point for all administrative tasks and API requests?
201What is the smallest deployable unit in Kubernetes?
202Which command is used to view detailed information about a specific pod?
203A Deployment manages ReplicaSets. What is the primary benefit of using a Deployment over directly managing ReplicaSets?
204You have a Pod with a container that needs to read sensitive data such as a database password. Which Kubernetes resource should you use to store this data?
205A Pod is stuck in Pending state. Which of the following is the MOST likely cause?
206Which component on a worker node is responsible for enforcing the network rules and implementing Service abstractions?
207You need to update a running Deployment to use a new container image. Which kubectl command should you use?
208A Service of type ClusterIP is created. What is the default behavior of this Service?
209You have a Deployment that manages 3 replicas. You want to perform a rolling update with a maximum of 2 Pods unavailable during the update. Which field should you set in the Deployment spec?
210You run 'kubectl logs my-pod' and see: "Error from server (BadRequest): container "my-container" in pod "my-pod" is waiting to start: PodInitializing". What does this mean?
211You have a Pod that needs to run a one-time batch job to completion. Which resource type should you use?
212Which TWO of the following are responsibilities of the kubelet on a worker node?
213Which TWO statements about Namespaces are correct?
214Which THREE of the following are valid ways to expose a Service to external traffic?
215Which Kubernetes control plane component is the primary entry point for all administrative tasks and serves the Kubernetes API?
216Which component runs on every worker node and is responsible for ensuring that containers are running in a pod according to the pod specification?
217What is the smallest deployable unit in Kubernetes that can be created, scheduled, and managed?
218You have a Deployment defined with replicas: 3. You run 'kubectl scale deployment my-deployment --replicas=5'. What happens?
219A developer needs to update a running Deployment's container image from 'nginx:1.21' to 'nginx:1.23' with minimal downtime and the ability to roll back if the new version fails. Which kubectl command should be used?
220You want to expose a set of pods running a web application on port 80 internally within the cluster, with a stable IP address, so that other services can reach them. Which Kubernetes resource should you create?
221A DevOps engineer has created a ConfigMap named 'app-config' and wants to use it to set environment variables in a pod. Which field in the pod spec should reference the ConfigMap?
222You notice that a pod is in 'Pending' state for a long time. Which of the following is the most likely cause?
223You create a Deployment with 'replicas: 3' and update the pod template to use a new image. After the rollout, you notice that the new ReplicaSet has 3 pods but they are all failing with 'CrashLoopBackOff'. You want to rollback to the previous working revision. Which command should you run?
224A pod is running but you need to view the contents of a file '/var/log/app.log' inside the container to debug an issue. Which kubectl command allows you to do this without modifying the pod?
225You need to ensure that a pod runs on a specific node that has an SSD. The node has the label 'disktype=ssd'. How should you configure the pod to target this node?
226You want to create a new Namespace called 'staging' and apply a ResourceQuota to it. Which of the following YAML snippets correctly defines a ResourceQuota that limits total memory to 10Gi and total CPU to 5 cores in namespace 'staging'?
227Which two of the following are benefits of using Kubernetes for container orchestration? (Select TWO.)
228Which two components are part of the Kubernetes control plane? (Select TWO.)
229Which three of the following are valid ways to interact with the Kubernetes API? (Select THREE.)
230A pod in the 'production' namespace is in a CrashLoopBackOff state. The pod has been running successfully for several days. You run 'kubectl describe pod app-pod -n production' and see the message: 'OOMKilled'. What is the MOST appropriate action to resolve this issue?
231Which Kubernetes control plane component is responsible for maintaining the desired state of the cluster by running controller loops?
232You need to run a stateless web application with three replicas, and you want to ensure that if a pod fails, it is automatically replaced. Which Kubernetes resource should you use?
233A developer created a Deployment with 5 replicas. After applying the manifest, only 3 pods are Running; the other 2 are Pending. Which is the MOST likely cause?
234What is the primary purpose of a Kubernetes Service?
235You want to view the logs of a container named 'app' inside a pod named 'web-pod-7d4f8'. Which kubectl command should you use?
236A cluster administrator needs to ensure that a Deployment named 'frontend' in namespace 'web' is updated with a new image version using a rolling update strategy. The current deployment has 4 replicas. The administrator runs: kubectl set image deployment/frontend frontend=nginx:1.21 -n web. Which of the following describes the expected behavior?
237Which of the following is a worker node component responsible for ensuring that containers are running in a pod as specified in the pod's spec?
238You need to create a ConfigMap from a file named 'app.properties'. Which kubectl command should you use?
239A pod has resource requests: cpu: 250m, memory: 512Mi and limits: cpu: 500m, memory: 1Gi. If the container tries to use 600m CPU and 700Mi memory, what will happen?
240Which component of the control plane is the only one that directly interacts with etcd?
241You have a Namespace 'team-a' and you want to see all Pods in that namespace, including those that are not ready. Which command should you use?
242Which TWO components are part of the Kubernetes control plane?
243Which TWO of the following are valid ways to expose a Deployment as a Service?
244Which THREE of the following are true about Kubernetes Namespaces?
245Which component of the Kubernetes control plane is responsible for storing the cluster state?
246A developer wants to deploy a stateless web application that should maintain three running instances at all times. Which Kubernetes resource should they use?
247You need to inspect the logs of a container named 'app' in a pod called 'web-1'. Which kubectl command should you use?
248Which Kubernetes resource provides a stable IP address and DNS name to access a set of pods?
249A pod remains in 'Pending' state. Upon inspecting the pod with 'kubectl describe pod', you see the message '0/1 nodes are available: 1 node(s) had taint {node.kubernetes.io/disk-pressure: }, that the pod didn't tolerate'. What is the most likely cause?
250Which of the following is true about Kubernetes Namespaces?
251A container in a pod has been restarted multiple times with 'CrashLoopBackOff' state. What does this indicate?
252You want to update a Deployment's container image from 'nginx:1.20' to 'nginx:1.21' and record the change. Which kubectl command should you use?
253In a YAML manifest for a Deployment, which field defines the number of pod replicas?
254A user runs 'kubectl get pods -n production' and sees no output. What is the most likely reason?
255Which component runs on every worker node and is responsible for maintaining the lifecycle of pods?
256You have a ConfigMap named 'app-config' and a Secret named 'db-password'. You want to mount them into a pod. Which statement is correct?
257Which TWO of the following are Kubernetes control plane components?
258Which THREE of the following are valid ways to expose environment variables from a ConfigMap to a pod?
259Which TWO of the following are true about Kubernetes Pods?
260What is the primary purpose of the Kubernetes control plane component 'kube-apiserver'?
261Which command is used to view detailed information about a specific pod, including events and conditions?
262A Deployment named 'myapp' is managing a ReplicaSet. You need to update the application image to version 2.0. What is the recommended approach?
263You have a pod that needs to securely access a database password. Which Kubernetes resource should you use to store the password?
264Which component runs on every node and is responsible for maintaining network rules that allow communication to Pods from network endpoints?
265A pod is in 'Pending' state for a long time. What is the most likely cause?
266You have two pods in different namespaces that need to communicate using a stable IP address. Which Kubernetes object provides a stable endpoint for a set of pods?
267Which Kubernetes object is used to logically isolate resources within a cluster, such as for separating environments like dev and prod?
268Your application requires persistent storage that must be available across pod restarts and rescheduling. What is the recommended approach?
269A Deployment is configured with 'replicas: 5' and a rolling update strategy. During an update, you notice that the number of available pods drops to 3 momentarily. Which field in the Deployment spec can be adjusted to control the minimum number of pods available during a rolling update?
270You need to ensure that a pod runs on a node with SSD storage. How can you achieve this?
271A Service of type ClusterIP is not resolving DNS names for pods. The pods are running and can communicate with each other via IP addresses. Which component should be checked first?
272Which TWO of the following are responsibilities of the kube-controller-manager?
273Which THREE of the following are true about Kubernetes labels and selectors?
274Which TWO of the following are characteristics of a Kubernetes Pod?
275Which Kubernetes object provides stable network endpoints and load balancing for a set of pods?
276Which control plane component is responsible for assigning pods to nodes?
277A developer deploys a pod with the following resource specification: ```yaml resources: requests: memory: "256Mi" limits: memory: "512Mi" ``` The pod is killed with OOMKilled. What is the most likely cause?
278You need to expose a set of pods running in the 'dev' namespace internally within the cluster on a stable IP. All pods have the label 'app: web'. Which kubectl command should you use?
279A Deployment is created with `replicas: 3`. After applying the manifest, only 2 pods are running and one is in Pending state. What is the most likely reason?
280An application requires that configuration data be mounted as a file inside the container. The data may change at runtime, and the application should automatically read the updated values without restarting. Which approach should be used?
281Which of the following is NOT a responsibility of the kubelet on a worker node?
282What is the primary purpose of the `kubectl apply` command?
283You need to run a one-time batch job that processes data and then exits. The job should run to completion and not be restarted. Which Kubernetes resource should you use?
284A service of type ClusterIP is created but pods cannot reach it using the service name. The pods are in the same namespace. What is a likely cause?
285Which command would you use to view the logs of a container named 'sidecar' inside a pod named 'app'?
286A pod is stuck in Terminating state for several minutes. What is the most likely cause?
287Which TWO of the following are valid methods for exposing a Service externally?
288Which THREE of the following are valid apiVersions for Kubernetes resources?
289Which TWO of the following are functions of the kube-controller-manager?
290Which Kubernetes control plane component is responsible for maintaining the desired state of the cluster by running controllers?
291What is the smallest deployable unit in Kubernetes that can be created and managed?
292You want to update a Deployment's container image to v2 and perform a rolling update. Which kubectl command achieves this?
293A pod is stuck in Pending state. You run 'kubectl describe pod' and see the event '0/3 nodes are available: 1 node(s) had taint(s) that the pod didn't tolerate, 2 node(s) had insufficient memory.'. What is the most likely cause?
294You need to provide an application with configuration data that does not change often and should not be baked into the container image. Which Kubernetes resource should you use?
295Which Kubernetes controller ensures that a specified number of pod replicas are running at all times?
296You have a Deployment with 3 replicas. You need to perform a rolling update with 2 extra pods during the update and ensure that only 1 pod is unavailable at any time. Which update strategy configuration achieves this?
297Which component on a worker node is responsible for enforcing the desired state of pods as defined in the pod specification?
298You need to expose a set of pods running a web application to internal cluster traffic on a stable IP address. Which resource should you create?
299A pod is in CrashLoopBackOff state. 'kubectl logs pod' shows 'Error: cannot connect to database at db-service:5432'. The database Service exists and is reachable from other pods. What is the most likely cause?
300You want to run a batch job that processes data and then terminates. Which Kubernetes resource is best suited for this workload?
The Kubernetes Fundamentals domain covers the key concepts tested in this area of the KCNA exam blueprint published by CNCF. Courseiva provides free domain-focused practice, mock exams, missed-question review, and readiness tracking across all KCNA domains — no account required.
The Courseiva KCNA question bank contains 300 questions in the Kubernetes Fundamentals domain. Click any question to see the full explanation and answer breakdown.
Start with a 10-question focused session to identify your baseline accuracy in this domain. Read every explanation — even for questions you answer correctly — to understand the reasoning. Once you score consistently above 80%, move to a 20–30 question session to confirm depth before moving to the next domain.
Yes — the session launcher on this page draws questions exclusively from the Kubernetes Fundamentals domain. Choose 10, 20, 30, or 50 questions for a focused session, or click individual questions to review them one by one.
Save your results, see per-domain analytics, and get readiness scores — free, for every certification.
Sign Up FreeFree forever · Every certification included