Courseiva
Knowledge + Practice
CertificationsVendorsCareer RoadmapsLabs & ToolsStudy GuidesGlossaryPractice Questions
C
Courseiva

Free IT certification practice questions with explained answers for CCNA, CompTIA, AWS, Azure, Google Cloud, and more.

Certification Practice Questions

CCNA practice questionsSecurity+ SY0-701 practice questionsAWS SAA-C03 practice questionsAZ-104 practice questionsAZ-900 practice questionsCLF-C02 practice questionsA+ Core 1 practice questionsGoogle Cloud ACE practice questionsCySA+ CS0-003 practice questionsNetwork+ N10-009 practice questions
View all certifications →

Product

CertificationsCertification PathsExam TopicsPractice TestsExam Dumps vs Practice TestsStudy HubComparisons

Company

AboutContactEditorial PolicyQuestion Writing PolicyTrust Center

Legal

Privacy PolicyTerms of Service

Courseiva is a free IT certification practice platform offering original exam-style practice questions, detailed explanations, topic-based practice, mock exams, readiness tracking, and study analytics for Cisco, CompTIA, Microsoft, AWS, and other technology certifications.

© 2026 Courseiva. Courseiva is operated by JTNetSolutions Ltd. All rights reserved.

Courseiva is an independent certification practice platform and is not affiliated with, endorsed by, or sponsored by Cisco, Microsoft, AWS, CompTIA, Google, ISC2, ISACA, or any other certification vendor. Vendor names and certification marks are used only to identify the exams learners are preparing for.

← Cloud Native Application Delivery practice sets

KCNA Cloud Native Application Delivery • Complete Question Bank

KCNA Cloud Native Application Delivery — All Questions With Answers

Complete KCNA Cloud Native Application Delivery question bank — all 0 questions with answers and detailed explanations.

94
Questions
Free
No signup
Certifications/KCNA/Practice Test/Cloud Native Application Delivery/All Questions
Question 1easymultiple choice
Read the full NAT/PAT explanation →

A startup wants to minimize downtime during application updates in Kubernetes. Which deployment strategy should they use?

Question 2mediummultiple choice
Read the full NAT/PAT explanation →

A DevOps engineer notices that after a Helm upgrade, the new pods are crash looping with 'ImagePullBackOff'. What is the most likely cause?

Question 3hardmultiple choice
Read the full NAT/PAT explanation →

A team wants to implement GitOps for their Kubernetes workloads using Argo CD. They have multiple environments (dev, staging, prod) in separate clusters. What is the best practice for structuring the Git repository?

Question 4mediummultiple choice
Read the full NAT/PAT explanation →

A user reports that a ConfigMap update is not reflected in running pods. Which action should be taken to ensure pods receive the updated configuration?

Question 5easymulti select
Read the full NAT/PAT explanation →

Which TWO of the following are benefits of using Helm for application delivery?

Question 6hardmulti select
Read the full NAT/PAT explanation →

Which THREE of the following practices are essential for a secure cloud native CI/CD pipeline?

Question 7hardmultiple choice
Read the full NAT/PAT explanation →

Refer to the exhibit. The deployment myapp is updated from image myapp:1.0 to myapp:2.0. During the rollout, what is the maximum number of pods that will be unavailable at any given time?

Exhibit

apiVersion: apps/v1
kind: Deployment
metadata:
  name: myapp
spec:
  replicas: 3
  strategy:
    type: RollingUpdate
    rollingUpdate:
      maxSurge: 1
      maxUnavailable: 0
  selector:
    matchLabels:
      app: myapp
  template:
    metadata:
      labels:
        app: myapp
    spec:
      containers:
      - name: myapp
        image: myapp:1.0
        resources:
          requests:
            cpu: 500m
            memory: 256Mi
          limits:
            cpu: 1
            memory: 512Mi
---
apiVersion: v1
kind: Service
metadata:
  name: myapp-svc
spec:
  type: ClusterIP
  selector:
    app: myapp
  ports:
  - port: 80
    targetPort: 8080
---
apiVersion: autoscaling/v2
kind: HorizontalPodAutoscaler
metadata:
  name: myapp-hpa
spec:
  scaleTargetRef:
    apiVersion: apps/v1
    kind: Deployment
    name: myapp
  minReplicas: 3
  maxReplicas: 10
  metrics:
  - type: Resource
    resource:
      name: cpu
      target:
        type: Utilization
        averageUtilization: 70
Question 8hardmultiple choice
Read the full NAT/PAT explanation →

Your organization runs a microservices application on a Kubernetes cluster with 5 worker nodes (each with 4 vCPU, 16GB RAM). The application consists of 20 microservices, each deployed as a Deployment with 3 replicas. Recently, after a new microservice 'inventory' was deployed with resource requests of 2 CPU and 4GB memory per pod, the cluster started experiencing pod scheduling failures. Many existing pods are in 'Pending' state with events indicating 'Insufficient cpu' or 'Insufficient memory'. The cluster has cluster autoscaling enabled (node pool ranging from 3 to 10 nodes), but new nodes are not being added quickly enough, and the existing nodes are heavily utilized. You need to resolve the scheduling failures while ensuring the inventory service can scale. Which course of action should you take?

Question 9easymultiple choice
Read the full NAT/PAT explanation →

A team is deploying a new microservice that processes sensitive user data. They want to ensure that secrets such as database passwords are not exposed in the container image or environment variables. Which approach should they use?

Question 10mediummultiple choice
Read the full NAT/PAT explanation →

A company is adopting a GitOps workflow for their Kubernetes deployments. They want to ensure that the cluster state always matches the desired state defined in a Git repository. Which tool is specifically designed for this purpose?

Question 11hardmultiple choice
Read the full NAT/PAT explanation →

A microservice application is experiencing high latency during traffic spikes. The team identifies that the database connection pool is exhausted. They want to implement a pattern that helps decouple the microservice from direct database connections and smooth out traffic bursts. Which design pattern should they apply?

Question 12mediummulti select
Read the full NAT/PAT explanation →

Which TWO statements are true about Kubernetes Deployments?

Question 13hardmultiple choice
Read the full NAT/PAT explanation →

A financial services company runs a critical trading application on Kubernetes. The application is deployed as a Deployment with 3 replicas. Each pod exposes metrics on port 8080 and uses a ConfigMap to load configuration. Recently, after a configuration change via a ConfigMap update, two of the three pods started crashing with an out-of-memory (OOM) error, while the third pod continues to run fine. The team verified that the ConfigMap was updated correctly and that the application code did not change. The pods have resource limits set: memory limit of 512Mi and request of 256Mi. The application's memory usage before the change was around 200Mi. The new configuration increases the in-memory cache size. The team suspects the issue is related to the configuration change. What is the best course of action?

Question 14hardmultiple choice
Read the full NAT/PAT explanation →

A team is deploying a microservice application on Kubernetes. They want to ensure that during rolling updates, the new version of the service receives traffic only after the readiness probe succeeds. However, they observe that the old pods are terminated before the new pods are ready, causing a brief downtime. Which configuration change should they make to the Deployment to prevent this?

Question 15mediummulti select
Read the full NAT/PAT explanation →

A DevOps team uses Helm to manage Kubernetes applications. They want to ensure that sensitive data (e.g., database passwords) is not stored in plaintext in the Helm chart or in the cluster's ConfigMaps/Secrets. Which TWO practices should they adopt? (Choose two.)

Question 16easymultiple choice
Read the full NAT/PAT explanation →

Refer to the exhibit. The deployment above is created, but the pods are not receiving traffic from the associated Service. The Service selector matches 'app: web'. The Service endpoints list is empty. What is the most likely cause?

Exhibit

Refer to the exhibit.

```
apiVersion: apps/v1
kind: Deployment
metadata:
  name: web-app
spec:
  replicas: 3
  selector:
    matchLabels:
      app: web
  template:
    metadata:
      labels:
        app: web
    spec:
      containers:
      - name: app
        image: nginx:1.21
        ports:
        - containerPort: 80
        readinessProbe:
          httpGet:
            path: /health
            port: 80
          initialDelaySeconds: 5
          periodSeconds: 10
```
Question 17mediumdrag order
Read the full NAT/PAT explanation →

Drag and drop the steps to create a Kubernetes deployment using kubectl into the correct order.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4
5Step 5
Question 18mediumdrag order
Read the full NAT/PAT explanation →

Drag and drop the steps to troubleshoot a Pod stuck in CrashLoopBackOff into the correct order.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4
5Step 5
Question 19mediumdrag order
Read the full NAT/PAT explanation →

Drag and drop the steps to create a ConfigMap from a file in Kubernetes into the correct order.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4
5Step 5
Question 20mediumdrag order
Read the full NAT/PAT explanation →

Drag and drop the steps to scale a Kubernetes Deployment horizontally into the correct order.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4
5Step 5
Question 21mediummatching
Read the full NAT/PAT explanation →

Match each Kubernetes resource to its primary purpose.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Smallest deployable unit containing one or more containers

Stable network endpoint to access a set of Pods

Stores non-sensitive configuration data as key-value pairs

Cluster-wide storage resource provisioned by an administrator

Manages external access to services, typically HTTP

Question 22mediummatching
Read the full NAT/PAT explanation →

Match each CNCF project to its primary function.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Monitoring and alerting toolkit

High-performance proxy for service mesh

Package manager for Kubernetes

Distributed key-value store for cluster state

DNS server for service discovery in Kubernetes

Question 23mediummatching
Read the full NAT/PAT explanation →

Match each Kubernetes networking concept to its description.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Default service type; exposes service on a cluster-internal IP

Exposes service on each node's IP at a static port

Exposes service externally using a cloud provider's load balancer

Service without a cluster IP; used for direct pod-to-pod communication

Implements traffic routing rules defined by Ingress resources

Question 24mediummatching
Read the full NAT/PAT explanation →

Match each Kubernetes storage concept to its description.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Request for storage by a user, referencing a PersistentVolume

Describes classes of storage with different QoS, backup policies, etc.

Ephemeral volume that shares a pod's lifecycle

Mounts a file or directory from the host node's filesystem

Container Storage Interface standard for pluggable storage drivers

Question 25mediummultiple choice
Read the full NAT/PAT explanation →

A development team wants to implement GitOps for their Kubernetes deployments using ArgoCD. Which ArgoCD component is responsible for monitoring the Git repository for changes and syncing the desired state to the cluster?

Question 26easymultiple choice
Read the full NAT/PAT explanation →

What is the primary purpose of a container registry in the CI/CD pipeline?

Question 27hardmultiple choice
Read the full NAT/PAT explanation →

A team uses Helm to manage a complex application. They want to perform a release upgrade but keep a record of the previous release so they can roll back if needed. Which Helm command should they use?

Question 28mediummultiple choice
Read the full NAT/PAT explanation →

In Flux, which controller is responsible for reconciling the desired state defined in a Git repository to the cluster?

Question 29mediummultiple choice
Read the full NAT/PAT explanation →

A team wants to implement a canary deployment strategy for their Kubernetes application. Which tool is specifically designed for progressive delivery and can be used to automate canary rollouts?

Question 30easymultiple choice
Read the full NAT/PAT explanation →

Which DORA metric measures the percentage of deployments that cause a failure in production?

Question 31hardmultiple choice
Read the full NAT/PAT explanation →

An organization uses Flux with Kustomize to manage their Kubernetes applications. They want to automatically update their deployment when a new container image is pushed to the registry. Which Flux component should they use?

Question 32mediummultiple choice
Read the full NAT/PAT explanation →

In Kustomize, what is the purpose of an overlay?

Question 33mediummultiple choice
Read the full NAT/PAT explanation →

A CI/CD pipeline includes image scanning. What is the primary security benefit of scanning container images in the CI phase?

Question 34easymultiple choice
Read the full NAT/PAT explanation →

What is the primary advantage of using Helm to package a Kubernetes application?

Question 35hardmultiple choice
Read the full NAT/PAT explanation →

A team uses ArgoCD with a Git repository that contains Helm charts. They want ArgoCD to automatically sync when a new image tag is pushed to the container registry. Which approach should they use?

Question 36easymultiple choice
Read the full NAT/PAT explanation →

In a CI/CD pipeline, what is the difference between continuous delivery and continuous deployment?

Question 37mediummulti select
Read the full NAT/PAT explanation →

Which TWO of the following are capabilities of ArgoCD? (Choose two.)

Question 38hardmulti select
Read the full NAT/PAT explanation →

Which THREE of the following are features of Helm that facilitate release management? (Choose three.)

Question 39mediummulti select
Read the full NAT/PAT explanation →

Which TWO of the following are deployment patterns that can be used to update applications with minimal downtime? (Choose two.)

Question 40easymultiple choice
Read the full NAT/PAT explanation →

What is the primary purpose of a continuous integration (CI) pipeline in cloud native application delivery?

Question 41mediummultiple choice
Read the full NAT/PAT explanation →

In GitOps with ArgoCD, what happens when the desired state in Git differs from the live state in the cluster?

Question 42hardmultiple choice
Read the full NAT/PAT explanation →

A team uses Flux with the Source Controller and Kustomize Controller. They update a YAML file in Git to change a Deployment's replica count. What describes the synchronization flow?

Question 43easymultiple choice
Read the full NAT/PAT explanation →

What is Helm's role in Kubernetes?

Question 44mediummultiple choice
Read the full NAT/PAT explanation →

During a canary deployment using Argo Rollouts, how does the tool determine the success of the canary before promoting it?

Question 45mediummultiple choice
Read the full NAT/PAT explanation →

A developer runs 'helm upgrade --install myapp ./mychart' and sees the release status is 'failed'. What is the most likely cause?

Question 46hardmultiple choice
Read the full NAT/PAT explanation →

When using Kustomize, how do you apply a common label to all resources in the base?

Question 47easymultiple choice
Read the full NAT/PAT explanation →

Which deployment strategy updates pods incrementally, replacing old pods with new ones while ensuring availability?

Question 48mediummultiple choice
Read the full NAT/PAT explanation →

A container image is being pushed to a private registry. What is the correct workflow?

Question 49hardmultiple choice
Read the full NAT/PAT explanation →

In a CI pipeline, image scanning is integrated to detect vulnerabilities. What is the best practice when a critical vulnerability is found in a base image?

Question 50mediummultiple choice
Read the full NAT/PAT explanation →

Which DORA metric measures how quickly code changes are deployed to production?

Question 51easymultiple choice
Read the full NAT/PAT explanation →

What is the purpose of values.yaml in a Helm chart?

Question 52mediummulti select
Read the full NAT/PAT explanation →

Which TWO statements are true about ArgoCD's health status?

Question 53hardmulti select
Read the full NAT/PAT explanation →

Which THREE are common features of progressive delivery?

Question 54mediummulti select
Read the full NAT/PAT explanation →

Which TWO actions can improve the DORA metric 'Mean Time to Recovery (MTTR)'?

Question 55easymultiple choice
Read the full NAT/PAT explanation →

What is the primary purpose of a container registry in a CI/CD pipeline?

Question 56easymultiple choice
Read the full NAT/PAT explanation →

In GitOps with ArgoCD, what does 'self-healing' refer to?

Question 57easymultiple choice
Read the full NAT/PAT explanation →

Which Helm command is used to upgrade a release to a newer version of a chart?

Question 58mediummultiple choice
Read the full NAT/PAT explanation →

A DevOps team wants to adopt a deployment pattern where a new version of an application is gradually rolled out to a small subset of users before full deployment. Which progressive delivery technique should they use?

Question 59mediummultiple choice
Read the full NAT/PAT explanation →

In Kustomize, what is the purpose of an overlay?

Question 60mediummultiple choice
Read the full NAT/PAT explanation →

Which DORA metric measures the percentage of deployments that cause a failure in production?

Question 61mediummultiple choice
Read the full NAT/PAT explanation →

In Flux CD, which component is responsible for reconciling the cluster state with the source of truth defined in a Git repository?

Question 62mediummultiple choice
Read the full NAT/PAT explanation →

An application deployment in Kubernetes uses a Deployment object. During a rolling update, the new ReplicaSet fails to become healthy. What is the default behavior of the Deployment controller?

Question 63mediummultiple choice
Read the full NAT/PAT explanation →

Which tool can be used to implement feature flags in a Kubernetes-native progressive delivery setup?

Question 64hardmultiple choice
Read the full NAT/PAT explanation →

A CI pipeline scans container images for vulnerabilities. The scan report shows a critical vulnerability in a base image layer. What is the most efficient way to remediate this issue?

Question 65hardmultiple choice
Read the full NAT/PAT explanation →

A Kubernetes Deployment is configured with 'strategy.type: RollingUpdate'. The team wants to ensure that during an update, no more than 25% of pods are unavailable at any time. Which specification should be added?

Question 66hardmultiple choice
Read the full NAT/PAT explanation →

In a GitOps workflow, a team uses ArgoCD. A developer manually changes a Deployment's replica count in the cluster via kubectl. ArgoCD has self-healing enabled. What will happen?

Question 67mediummulti select
Read the full NAT/PAT explanation →

Which TWO of the following are benefits of using Helm for managing Kubernetes applications?

Question 68hardmulti select
Read the full NAT/PAT explanation →

Which THREE of the following are key capabilities of progressive delivery tools like Argo Rollouts?

Question 69mediummulti select
Read the full NAT/PAT explanation →

Which TWO statements about GitOps are correct?

Question 70easymultiple choice
Read the full NAT/PAT explanation →

What is the primary purpose of continuous integration (CI) in a cloud-native application delivery pipeline?

Question 71mediummultiple choice
Read the full NAT/PAT explanation →

A DevOps team wants to implement GitOps for their Kubernetes cluster. Which tool is specifically designed for Kubernetes GitOps and can automatically sync the cluster state with a Git repository?

Question 72mediummultiple choice
Read the full NAT/PAT explanation →

In a Helm chart, which file is used to define default configuration values that can be overridden by users during installation?

Question 73mediummultiple choice
Read the full NAT/PAT explanation →

A team is using Kustomize to manage configurations for different environments. They want to create a variant of a base deployment that uses a different number of replicas. Which Kustomize feature should they use?

Question 74mediummultiple choice
Read the full NAT/PAT explanation →

Which deployment strategy is characterized by gradually shifting traffic from an old version to a new version of an application, often requiring a service mesh or ingress controller to manage traffic splitting?

Question 75hardmultiple choice
Read the full NAT/PAT explanation →

A team uses Argo Rollouts for progressive delivery. They configure a canary rollout with a traffic split of 20% to the new version. After verification, the rollout automatically increases traffic to 100%. Which Argo Rollout manifest field controls this gradual traffic increase?

Question 76easymultiple choice
Read the full NAT/PAT explanation →

What is the purpose of container image scanning in a CI/CD pipeline?

Question 77hardmultiple choice
Read the full NAT/PAT explanation →

According to DORA metrics, which metric measures the percentage of deployments that fail in production?

Question 78mediummultiple choice
Read the full NAT/PAT explanation →

A team uses Flux to manage GitOps. Which Flux component is responsible for reconciling the cluster state with the desired state defined in a Git repository?

Question 79easymultiple choice
Read the full NAT/PAT explanation →

Which command is used to rollback a Helm release to a previous revision?

Question 80mediummultiple choice
Read the full NAT/PAT explanation →

In a blue-green deployment strategy, at any given time, only one environment (blue or green) is active. What is the primary advantage of this approach?

Question 81hardmultiple choice
Read the full NAT/PAT explanation →

A team wants to use feature flags to control the rollout of a new feature in a Kubernetes-deployed microservice. Which tool is specifically designed for managing feature flags in cloud-native applications?

Question 82mediummulti select
Read the full NAT/PAT explanation →

Which TWO statements are true about Kustomize? (Choose 2)

Question 83mediummulti select
Read the full NAT/PAT explanation →

Which THREE are examples of DORA metrics used to measure DevOps performance? (Choose 3)

Question 84hardmulti select
Read the full NAT/PAT explanation →

Which TWO components are part of the core Flux GitOps toolkit? (Choose 2)

Question 85easymultiple choice
Read the full NAT/PAT explanation →

What is the primary purpose of a container registry in a CI/CD pipeline?

Question 86mediummultiple choice
Read the full NAT/PAT explanation →

A team uses Helm to manage their Kubernetes applications. They need to upgrade a release and want to reuse the values from the previous release while overriding a specific value. Which helm command should they use?

Question 87hardmultiple choice
Read the full NAT/PAT explanation →

A Kubernetes cluster runs a critical application that must be updated with zero downtime. The team wants to gradually shift traffic from the old version to the new version over a period of time. Which deployment pattern is MOST appropriate?

Question 88mediummultiple choice
Read the full NAT/PAT explanation →

In the context of DORA metrics, which metric measures how often an organization successfully releases to production?

Question 89mediummulti select
Read the full NAT/PAT explanation →

Which TWO of the following are characteristics of Kustomize?

Question 90hardmulti select
Read the full NAT/PAT explanation →

Which TWO of the following are features of ArgoCD that support GitOps principles?

Question 91mediummulti select
Read the full NAT/PAT explanation →

Which THREE of the following are DORA metrics?

Question 92hardmulti select
Read the full NAT/PAT explanation →

Which THREE of the following are core components of Flux?

Question 93easymulti select
Read the full NAT/PAT explanation →

Which TWO of the following are benefits of implementing progressive delivery techniques (e.g., canary releases)?

Question 94mediummulti select
Read the full NAT/PAT explanation →

Which THREE of the following are important security practices in a container image CI/CD pipeline?

Practice tests

Scored 10-question sessions with instant feedback and explanations.

KCNA Practice Test 1 — 10 Questions→KCNA Practice Test 2 — 10 Questions→KCNA Practice Test 3 — 10 Questions→KCNA Practice Test 4 — 10 Questions→KCNA Practice Test 5 — 10 Questions→KCNA Practice Exam 1 — 20 Questions→KCNA Practice Exam 2 — 20 Questions→KCNA Practice Exam 3 — 20 Questions→KCNA Practice Exam 4 — 20 Questions→Free KCNA Practice Test 1 — 30 Questions→Free KCNA Practice Test 2 — 30 Questions→Free KCNA Practice Test 3 — 30 Questions→KCNA Practice Questions 1 — 50 Questions→KCNA Practice Questions 2 — 50 Questions→KCNA Exam Simulation 1 — 100 Questions→

Practice by domain

Each domain maps to a weighted exam section. Focus on the domain where you are weakest.

Kubernetes FundamentalsContainer OrchestrationCloud Native ArchitectureCloud Native ObservabilityCloud Native Application Delivery

Practice by scenario

Filter questions by type — troubleshooting, exhibit, drag-and-drop, PBQ, ACLs, OSPF, and more.

Browse scenarios→

Continue studying

All Cloud Native Application Delivery setsAll Cloud Native Application Delivery questionsKCNA Practice Hub