KCNA Practice Test 9 — 10 Questions

Question 1

A team wants to manage their Kubernetes infrastructure using code. Which tool is specifically designed for Infrastructure as Code (IaC) and can manage Kubernetes resources?

Accepted Answer

Terraform. Terraform is a dedicated Infrastructure as Code (IaC) tool that uses declarative configuration files (HCL) to provision and manage cloud resources, including Kubernetes clusters and their workloads. It maintains state to track resource dependencies and can orchestrate Kubernetes resources via its Kubernetes provider, making it the correct choice for managing Kubernetes infrastructure as code.

Answer

Helm

Answer

kubectl

Answer

Kustomize

Question 2

In a multi-cloud architecture, what is a common use case for a service mesh?

Accepted Answer

To enable secure service-to-service communication across clusters. A service mesh, such as Istio or Linkerd, provides a dedicated infrastructure layer for handling service-to-service communication. In a multi-cloud architecture, its common use case is to enable secure, observable, and resilient communication between services running in different Kubernetes clusters across clouds, using mutual TLS (mTLS) for encryption and traffic policies for routing.

Answer

To synchronize Kubernetes resources across clouds

Answer

To provide cloud-agnostic block storage

Answer

To provide a single ingress gateway for all clouds

Question 3

In an event-driven architecture using a message broker, which component is responsible for receiving events and forwarding them to subscribed services?

Accepted Answer

Message broker. In event-driven architecture, the message broker (Kafka, RabbitMQ, NATS, Pulsar) is the intermediary that receives published events and routes them to subscribers based on topics, queues, or routing keys. It decouples producers from consumers, buffers events, and handles delivery semantics. Option B names this component directly.

Answer

Service mesh

Answer

API gateway

Answer

Load balancer

Question 4

Which component runs on every worker node and is responsible for ensuring that containers are running in a pod according to the pod specification?

Accepted Answer

kubelet. The kubelet is the primary node agent that runs on every worker node in a Kubernetes cluster. It registers the node with the API server, watches for PodSpecs assigned to its node, and ensures the containers described in those PodSpecs are running and healthy. It does this by interacting with the container runtime to create, start, and stop containers as needed, and it reports the node and pod status back to the control plane.

Answer

kube-scheduler

Answer

container runtime

Answer

kube-proxy

Question 5

A Kubernetes Deployment manages a set of pods. What is the primary purpose of a Deployment?

Accepted Answer

To declare the desired state for a set of pods and manage rolling updates. A Kubernetes Deployment declares the desired state for a set of pods and manages rolling updates and rollbacks. It ensures that the specified number of pod replicas are running and provides declarative updates to the application, which is its primary purpose.

Answer

To store configuration data as key-value pairs

Answer

To run a batch job to completion

Answer

To expose a set of pods as a network service

Question 6

In a service mesh architecture, which component is responsible for intercepting and managing traffic to and from a pod?

Accepted Answer

Sidecar proxy. The sidecar proxy (e.g., Envoy) runs alongside each service instance and intercepts all network traffic, enabling features like traffic management and observability.

Answer

Ingress controller

Answer

API gateway

Answer

Control plane

Question 7

What is the primary purpose of the `kubectl apply` command?

Accepted Answer

To create or update resources from a manifest. The `kubectl apply` command uses a declarative approach to manage Kubernetes resources. It sends a PATCH request to the API server, which compares the desired state in the provided manifest (YAML/JSON) with the current state of the resource in the cluster. If the resource does not exist, it creates it; if it does exist, it updates only the fields specified in the manifest, preserving any fields not mentioned.

Answer

To view resource details

Answer

To delete resources

Answer

To execute commands inside a container

Question 8

Which of the following is a benefit of using a service mesh?

Accepted Answer

Enhanced observability and traffic control. A service mesh (Istio, Linkerd, Consul Connect) injects sidecar proxies alongside application pods to intercept all service-to-service traffic, providing uniform mTLS, traffic shifting, retries, circuit breaking, and rich telemetry (latency, error rates, request tracing) without application code changes. Option C correctly identifies the two headline benefits: enhanced observability and traffic control. These capabilities are delivered at the infrastructure layer, transparently to the application.

Answer

Simplified storage management

Answer

Automatic scaling of applications

Answer

Direct database access

Question 9

You run 'kubectl get pods' and see a Pod in the 'Pending' state. Which of the following is a likely cause?

Accepted Answer

No node meets the requested CPU or memory resources. A Pod enters the 'Pending' state when it cannot be scheduled onto a node. The most common reason is that no node in the cluster has sufficient available CPU or memory resources to satisfy the Pod's resource requests. The Kubernetes scheduler continuously evaluates nodes against Pod resource requirements, and if none match, the Pod remains unscheduled in Pending.

Answer

The application crashed due to a bug

Answer

The container image is missing

Answer

The Pod has been deleted

Question 10

According to the 12-factor app methodology, how should an application store configuration that varies between deployments (e.g., database connection strings)?

Accepted Answer

In environment variables. The 12-factor app recommends strict separation of config from code, storing config in environment variables.

Answer

In a configuration file that is version-controlled

Answer

In a database table

Answer

Hard-coded in the application code