KCNA Practice Test 3 — 10 Questions

Question 1

Which TWO statements about container images are correct? (Choose two.)

Accepted Answer

Container images can be stored in a registry like Docker Hub. Container images are built in layers and can be stored in registries. They are not immutable once built (they can be overwritten), and they include only the application and dependencies, not a full OS kernel.

Answer

Container images include a full operating system kernel

Answer

Container images are immutable once built

Answer

Container images can only be built on Linux

Question 2

In the context of the 12-factor app methodology, which factor requires that an app's configuration be stored in environment variables?

Accepted Answer

Config. Factor III (Config) states that configuration should be stored in environment variables to decouple it from code.

Answer

Dependencies

Answer

Codebase

Answer

Backing services

Question 3

What is the primary purpose of the CNCF (Cloud Native Computing Foundation)?

Accepted Answer

To host and nurture open-source cloud-native projects and drive adoption. The CNCF fosters the adoption of cloud-native technologies by hosting and nurturing open-source projects like Kubernetes, Prometheus, and Envoy.

Answer

To certify individuals in cloud-native technologies

Answer

To develop and maintain the Kubernetes project exclusively

Answer

To provide commercial support for cloud-native software

Question 4

What is the primary purpose of a service mesh in a cloud-native architecture?

Accepted Answer

To provide a dedicated infrastructure layer for handling service-to-service communication. A service mesh provides observability, traffic management, and security for microservices communication, offloading these concerns from application code.

Answer

To compile application code

Answer

To replace container orchestration

Answer

To store application configuration

Question 5

Which THREE of the following are features typically provided by a service mesh? (Choose three.)

Accepted Answer

Observability through metrics and tracing. Service mesh provides traffic management (routing, canary releases), observability (metrics, tracing), and security (mTLS, authorization). Auto-scaling is handled by Horizontal Pod Autoscaler or custom metrics, not by the service mesh. Service discovery is often built into Kubernetes itself, though service mesh can enhance it, but it's not a core feature.

Answer

Auto-scaling of pods based on CPU

Answer

Service discovery

Question 6

Which TWO of the following are examples of Infrastructure as Code (IaC) tools? (Choose 2.)

Accepted Answer

Terraform. Terraform and Pulumi are popular IaC tools that allow infrastructure provisioning via code.

Answer

kubectl

Answer

Helm

Answer

Docker Compose

Question 7

An organization wants to manage infrastructure using code to ensure consistent and repeatable deployments across multiple cloud providers. Which tool is MOST suitable for this multi-cloud Infrastructure as Code approach?

Accepted Answer

Terraform. Terraform is a cloud-agnostic IaC tool that supports multiple providers, enabling consistent management across clouds.

Answer

Kuberntes manifests

Answer

AWS CloudFormation

Answer

Azure Resource Manager Templates

Question 8

Which Kubernetes resource is used to run a batch job that runs to completion?

Accepted Answer

Job. A Kubernetes Job is specifically designed to run a finite task to completion, creating one or more Pods and ensuring they successfully terminate. Unlike controllers that maintain a desired state of running Pods, a Job tracks the number of successful completions and stops when the specified parallelism or completions count is reached.

Answer

DaemonSet

Answer

StatefulSet

Answer

Deployment

Question 9

A DevOps team wants to collect logs from all Kubernetes nodes and forward them to a central log storage system. Which tool is specifically designed for lightweight log aggregation and forwarding on Kubernetes nodes?

Accepted Answer

Fluent Bit. Fluent Bit is a lightweight log processor and forwarder, designed for resource-constrained environments like Kubernetes nodes.

Answer

Elasticsearch

Answer

Prometheus

Answer

Grafana

Question 10

A team uses ArgoCD with a Git repository that contains Helm charts. They want ArgoCD to automatically sync when a new image tag is pushed to the container registry. Which approach should they use?

Accepted Answer

Use ArgoCD Image Updater. ArgoCD Image Updater is the official tool to automatically update image tags in Kubernetes manifests (including Helm values) and commit changes to Git, triggering ArgoCD to sync.

Answer

Use Flux Image Automation Controller

Answer

Configure a webhook from the registry to ArgoCD API server

Answer

Manually update the Helm values and commit