KCNA Cloud Native Architecture Practice Test 2 — 15 Questions

Question 1

Which service mesh provides built-in support for multi-cluster and multi-cloud deployments?

Accepted Answer

Istio. Istio is correct because it provides native support for multi-cluster and multi-cloud deployments through its mesh federation capabilities, including features like multi-primary and primary-remote cluster models, as well as east-west gateways for cross-cluster traffic. It leverages Envoy proxies and a unified control plane to enable service discovery, traffic management, and security across clusters, making it the only option among the listed that offers built-in, production-ready multi-cluster support.

Answer

Kuma

Answer

Consul Connect

Answer

Linkerd

Question 2

Which CNCF project is primarily focused on providing a unified way to define and manage cloud-native applications using declarative configuration stored in Git?

Accepted Answer

ArgoCD. ArgoCD is a CNCF project that implements GitOps: it watches Git repositories containing declarative Kubernetes manifests and continuously reconciles the cluster state to match the desired state in Git. It is the canonical answer for 'declarative configuration stored in Git' in the cloud-native ecosystem.

Answer

Helm

Answer

Prometheus

Answer

Envoy

Question 3

A development team wants to deploy a serverless function that scales to zero when not in use. Which CNCF project or platform is BEST suited for this requirement?

Accepted Answer

Knative. Knative is a CNCF project that provides serverless primitives on top of Kubernetes, including scale-to-zero for workloads with no traffic. Its Serving component automatically scales pods down to zero when idle and spins them back up on demand, satisfying the requirement while remaining vendor-neutral and Kubernetes-native. This makes it the best fit among the listed CNCF-aligned options.

Answer

Kubeless

Answer

AWS Lambda

Answer

OpenFaaS

Question 4

Which of the following is a resiliency pattern that limits the number of concurrent requests to a service to prevent overload?

Accepted Answer

Bulkhead. Bulkhead isolates resources into pools (e.g., thread pools) so that a failure in one pool does not cascade. Circuit breaker stops calls after failures, retry repeats failed calls, and timeout limits wait time.

Answer

Retry

Answer

Timeout

Answer

Circuit breaker

Question 5

A team wants to implement Infrastructure as Code (IaC) for managing Kubernetes resources. Which tool is BEST suited for this purpose?

Accepted Answer

Terraform. Terraform is an Infrastructure as Code (IaC) tool that allows you to define and manage Kubernetes resources declaratively using HCL. It is cloud-agnostic and supports Kubernetes provider for managing clusters, pods, services, etc. While Pulumi also provides IaC capabilities, Terraform is more widely adopted for managing Kubernetes infrastructure. Helm, on the other hand, is a package manager for deploying pre-packaged applications, not an IaC tool.

Answer

Pulumi

Answer

Ansible

Answer

Helm

Question 6

An application deployed on Kubernetes is experiencing intermittent failures due to network latency. Which resiliency pattern should be implemented to gracefully handle such failures?

Accepted Answer

Retry. The Retry pattern is specifically designed to handle transient failures like intermittent network latency by re-executing a failed operation after a short delay. In Kubernetes, this is often implemented at the application level using libraries (e.g., Spring Retry, Resilience4j) or via service mesh features (e.g., Istio retries). Since the failures are intermittent, a retry gives the operation a chance to succeed on a subsequent attempt, making it the most direct and appropriate resiliency pattern for this scenario.

Answer

Circuit breaker

Answer

Bulkhead

Answer

Timeout

Question 7

Which FOUR of the following are CNCF graduated projects? (Choose four.)

Accepted Answer

Helm. Helm (A) is a CNCF graduated project, having reached that maturity level in 2020 as the package manager for Kubernetes. Kubernetes (C) was the CNCF's first project and is the flagship graduated project, originally donated by Google. ArgoCD (D) is part of the Argo project, which graduated in December 2022, providing GitOps continuous delivery for Kubernetes. Prometheus (E) graduated in 2018 as the de facto standard for cloud-native metrics and monitoring. Linkerd (B) is only an incubating project, not graduated, so it does not qualify.

Answer

Linkerd

Question 8

What is the primary purpose of the CNCF (Cloud Native Computing Foundation)?

Accepted Answer

To host and nurture open source cloud native projects. The primary purpose of the Cloud Native Computing Foundation (CNCF) is to host and nurture open source cloud native projects. It provides a vendor-neutral home for projects like Kubernetes, Prometheus, and Envoy, fostering collaboration and innovation in the cloud native ecosystem.

Answer

To develop proprietary cloud software

Answer

To certify individuals in cloud technologies

Answer

To provide commercial support for Kubernetes

Question 9

Which of the following is a graduated CNCF project?

Accepted Answer

Prometheus. Prometheus is a graduated CNCF project, having reached the graduation maturity level in August 2018. It is a core monitoring and alerting toolkit widely adopted in cloud-native environments, and its graduation status reflects its stability, widespread use, and strong governance within the CNCF ecosystem.

Answer

OpenTelemetry

Answer

K3s

Answer

KubeEdge

Question 10

Which TWO are benefits of using a service mesh? (Choose two.)

Accepted Answer

Observability of service-to-service communication. Option A is correct because a service mesh like Istio or Linkerd provides observability of service-to-service communication by deploying sidecar proxies (e.g., Envoy) alongside each workload, which capture metrics, distributed traces, and logs for every request without requiring application code changes. Option C is correct because a service mesh enables traffic management capabilities such as canary deployments, blue-green releases, traffic splitting, retries, and circuit breaking through its control plane and proxy configuration (e.g., Istio VirtualService and DestinationRule resources). Option B is not a service mesh benefit because automatic database scaling is a database platform feature (e.g., Aurora Auto Scaling or DynamoDB on-demand), not something a service mesh provides. Option D is incorrect because container image building is handled by CI/CD tooling such as Docker, Buildah, or Kaniko, not by a service mesh. Option E is incorrect because load balancing of external requests is typically performed by an ingress controller, API gateway, or cloud load balancer, whereas a service mesh primarily handles east-west traffic between internal services.

Answer

Automatic database scaling

Answer

Container image building

Answer

Load balancing of external requests

Question 11

What is the primary purpose of the CNCF (Cloud Native Computing Foundation)?

Accepted Answer

To host and nurture open-source cloud-native projects and drive adoption. The CNCF is a Linux Foundation project whose mission is to make cloud-native computing ubiquitous by hosting and nurturing open-source projects, fostering community collaboration, and driving vendor-neutral adoption. It hosts Kubernetes, Prometheus, Envoy, containerd, and dozens of other projects across maturity levels (Sandbox, Incubating, Graduated). Its role is governance, marketing, and community building, not commercial support or exclusive development of any single project.

Answer

To certify individuals in cloud-native technologies

Answer

To develop and maintain the Kubernetes project exclusively

Answer

To provide commercial support for cloud-native software

Question 12

A developer wants to deploy a function that reacts to image upload events in a cloud storage bucket. The function should scale to zero when idle. Which architecture best fits this use case?

Accepted Answer

Implement a serverless function using a FaaS platform like AWS Lambda. Serverless functions (FaaS) like AWS Lambda are event-driven and automatically scale to zero when idle, meaning you only pay for execution time. They natively integrate with cloud storage events (e.g., S3 ObjectCreated), allowing the function to be triggered directly by image uploads without managing infrastructure. This matches the requirement of reacting to events and scaling to zero.

Answer

Use a long-running virtual machine to process events

Answer

Deploy a container on Kubernetes with HorizontalPodAutoscaler set to minReplicas 0

Answer

Use a Kubernetes Job triggered by a CronJob

Question 13

An organization wants to manage infrastructure across multiple cloud providers using a single declarative configuration language. Which tool is best suited for this requirement?

Accepted Answer

Pulumi. Pulumi supports multiple clouds and allows infrastructure definition using general-purpose programming languages, enabling multi-cloud management with a single tool.

Answer

Kustomize

Answer

Helm

Answer

Terraform

Question 14

Which of the following best describes the purpose of the CNCF (Cloud Native Computing Foundation)?

Accepted Answer

To host and foster open source cloud native projects and promote cloud native technologies. The CNCF is a Linux Foundation project whose core mission is to host, curate, and foster vendor-neutral open source cloud native projects such as Kubernetes, Prometheus, Envoy, and containerd, while also promoting adoption of cloud native technologies through community programs, conformance, and education. Its role is as a neutral home and ecosystem steward, not as a standards body or product vendor.

Answer

To standardize cloud APIs across all public cloud providers

Answer

To provide certification programs and best practices for cloud native computing

Answer

To develop and maintain a single cloud native technology stack

Question 15

A development team wants to deploy a serverless function that triggers when a file is uploaded to an S3 bucket. Which cloud native technology is most appropriate for this scenario?

Accepted Answer

Knative. Knative is a Kubernetes-based platform to build, deploy, and manage serverless workloads, including event-driven functions. AWS Lambda is a proprietary service, not a cloud native project.

Answer

AWS Lambda

Answer

Helm

Answer

Istio