KCNA Practice Test 49 — 15 Questions

Question 1

In a multi-cloud scenario, an organization wants to avoid vendor lock-in by abstracting infrastructure provisioning. Which tool is specifically designed to manage infrastructure as code across multiple cloud providers?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Terraform. Terraform is an infrastructure-as-code tool that supports multiple cloud providers (AWS, Azure, GCP, etc.) with a declarative configuration language. Pulumi also supports multiple clouds but is less widely adopted in the CNCF ecosystem.

Answer

Helm

Answer

Istio

Answer

ArgoCD

Question 2

Which TWO of the following are capabilities of ArgoCD? (Choose two.)

Accepted Answer

Automated application sync from Git to cluster. ArgoCD provides automated sync (applying desired state from Git) and self-healing (automatically reverting configuration drift). It is not a CI tool and does not build images.

Answer

Building container images from source code

Answer

Running unit tests during deployment

Answer

Managing secrets using Kubernetes Secrets

Question 3

A company wants to run a batch job that processes data and then terminates. Which Kubernetes resource should they use?

Accepted Answer

Job. A Job is the correct Kubernetes resource for a batch job that processes data and then terminates. Unlike controllers that maintain a desired state (like Deployments), a Job creates one or more Pods and ensures they run to successful completion. Once the specified number of Pods terminate successfully, the Job is considered complete and does not restart the Pods, making it ideal for one-off or finite processing tasks.

Answer

CronJob

Answer

Deployment

Answer

DaemonSet

Question 4

What is the primary purpose of Prometheus in cloud native observability?

Accepted Answer

Collect and store metrics. Prometheus is a metric system that collects and stores numeric time-series data.

Answer

Provide distributed tracing

Answer

Visualize data

Answer

Collect and store logs

Question 5

Which TWO of the following are characteristics of Kustomize?

Accepted Answer

Supports patching resources via patchesStrategicMerge. Kustomize uses overlays to customize Kubernetes manifests without templating. It does not use values files or require a package manager.

Answer

Requires a values.yaml file for configuration

Answer

Uses a templating engine similar to Helm

Answer

Can manage dependencies between charts

Question 6

An SRE team defines an SLO that 99.9% of requests to a service should complete in under 500ms over a 30-day rolling window. If the service receives 10 million requests in a month, what is the maximum number of requests that can exceed the latency threshold while still meeting the SLO?

Accepted Answer

10,000. SLO of 99.9% means up to 0.1% errors are allowed. 0.1% of 10,000,000 is 10,000 requests.

Answer

5,000

Answer

1,000

Answer

100,000

Question 7

Which TWO statements are true about ArgoCD's health status?

Accepted Answer

ArgoCD can be configured to perform automatic rollback on health degradation. ArgoCD assesses health based on Kubernetes resource status and can take actions when health degrades.

Answer

ArgoCD only supports health checks for Deployments

Answer

Health status is only determined by the application's YAML definition

Answer

A healthy application always means the sync status is 'Synced'

Question 8

Which THREE of the following are core components of the OpenTelemetry specification? (Select three.)

Accepted Answer

Data Model. The OpenTelemetry specification defines the API, SDK, and data model. These are the core components.

Answer

Collector

Answer

Exporter

Question 9

An application deployed on Kubernetes is experiencing intermittent failures due to network latency. Which resiliency pattern should be implemented to gracefully handle such failures?

Accepted Answer

Retry. Retry pattern automatically retries failed operations, which is appropriate for transient failures like network latency. Circuit breaker prevents repeated calls to a failing service. Timeout sets a maximum wait. Bulkhead isolates resources.

Answer

Circuit breaker

Answer

Bulkhead

Answer

Timeout

Question 10

In GitOps, what is the role of a tool like ArgoCD?

Accepted Answer

To automatically apply changes from a Git repository to a Kubernetes cluster. ArgoCD synchronizes the cluster state with the desired state defined in a Git repository.

Answer

To monitor application performance

Answer

To create Docker images from source code

Answer

To manage container registries

Question 11

What is the primary purpose of the CNCF (Cloud Native Computing Foundation)?

Accepted Answer

To host and promote open-source cloud native projects. The CNCF hosts and nurtures open-source, vendor-neutral cloud native projects, fostering their growth and adoption.

Answer

To provide commercial support for Kubernetes

Answer

To certify cloud providers

Answer

To develop proprietary cloud software

Question 12

In a CI pipeline, image scanning is integrated to detect vulnerabilities. What is the best practice when a critical vulnerability is found in a base image?

Accepted Answer

Fail the pipeline and notify the team to fix the base image. The pipeline should fail so that the vulnerability is addressed before deployment, preventing insecure images from reaching production.

Answer

Deploy to production and patch later

Answer

Automatically patch the image in the pipeline

Answer

Ignore the vulnerability and proceed with deployment

Question 13

Which THREE are responsibilities of the OpenTelemetry project? (Select three.)

Accepted Answer

Provide instrumentation libraries. OpenTelemetry provides SDKs for instrumentation, a collector for processing, and APIs for standards.

Answer

Visualize telemetry data

Answer

Store long-term telemetry data

Question 14

What is the primary advantage of using Helm to package a Kubernetes application?

Accepted Answer

It provides a templating engine to parameterize Kubernetes manifests. Helm packages Kubernetes manifests into a single chart, allowing easy installation, upgrades, and rollbacks with parameterization via values.yaml.

Answer

It automatically scales applications based on load

Answer

It enforces security policies on deployments

Answer

It manages network policies between services

Question 15

An administrator wants to update the image of a Deployment named 'my-app' from 'nginx:1.19' to 'nginx:1.20' with a rolling update strategy. They want to ensure that during the update, the number of unavailable pods never exceeds 1. Which field should they set in the Deployment spec?

Accepted Answer

spec.strategy.rollingUpdate.maxUnavailable. `spec.strategy.rollingUpdate.maxUnavailable` controls the maximum number of Pods that can be unavailable during a rolling update. Setting this to 1 ensures that at most one Pod is unavailable at any time, meeting the administrator's requirement. This field is part of the Deployment's rolling update strategy and directly governs the availability guarantee during the update process.

Answer

spec.replicas

Answer

spec.minReadySeconds

Answer

spec.strategy.rollingUpdate.maxSurge