KCNA Cloud Native Architecture Practice Test 4 — 15 Questions

Question 1

In a multi-cloud architecture, what is a common use case for a service mesh?

Accepted Answer

To enable secure service-to-service communication across clusters. A service mesh, such as Istio or Linkerd, provides a dedicated infrastructure layer for handling service-to-service communication. In a multi-cloud architecture, its common use case is to enable secure, observable, and resilient communication between services running in different Kubernetes clusters across clouds, using mutual TLS (mTLS) for encryption and traffic policies for routing.

Answer

To synchronize Kubernetes resources across clouds

Answer

To provide cloud-agnostic block storage

Answer

To provide a single ingress gateway for all clouds

Question 2

Which of the following is a benefit of using an API gateway pattern?

Accepted Answer

It provides a single entry point for clients and handles cross-cutting concerns. API gateway can offload cross-cutting concerns like authentication from individual microservices.

Answer

It reduces the number of microservices needed

Answer

It replaces the need for a service mesh

Answer

It stores application state

Question 3

What is the primary purpose of the sidecar container in a service mesh?

Accepted Answer

To intercept and manage network traffic for the main container. In a service mesh, the sidecar container (typically an Envoy or Linkerd proxy) is injected alongside the main application container to intercept and manage all inbound and outbound network traffic. This allows the service mesh to enforce traffic policies, handle service discovery, implement retries and circuit breaking, and collect telemetry without modifying the application code. The sidecar operates at the network layer (L4/L7), decoupling communication concerns from business logic.

Answer

To run application business logic

Answer

To handle logging and monitoring of the main container

Answer

To provide persistent storage for the main container

Question 4

Which GitOps tool is a CNCF graduated project that synchronizes Kubernetes clusters with a Git repository?

Accepted Answer

Argo CD. Argo CD is a CNCF graduated project for GitOps on Kubernetes.

Answer

Tekton

Answer

Jenkins X

Answer

Flux

Question 5

Which TWO of the following are principles of the 12-factor app? (Choose two.)

Accepted Answer

Config. Config is a core principle of the 12-factor app methodology, which mandates strict separation of configuration from code. Configuration (such as database URLs, credentials, or hostnames) must be stored in environment variables, not hardcoded in the application source. This allows the same codebase to be deployed across different environments (development, staging, production) without modification, adhering to the principle of config-driven behavior.

Answer

Monolithic deployment

Answer

Stateful sessions

Answer

Manual provisioning

Question 6

Which THREE of the following are benefits of using an event-driven architecture? (Choose three.)

Accepted Answer

Better resilience through decoupled components. Event-driven architecture enables loose coupling, scalability, and asynchronous processing.

Answer

Simpler debugging and tracing

Answer

Reduced need for monitoring

Question 7

What is the primary purpose of the CNCF (Cloud Native Computing Foundation)?

Accepted Answer

To host and nurture open-source cloud-native projects. The CNCF's primary purpose is to host and nurture open-source cloud-native projects, such as Kubernetes, Prometheus, and Envoy, by providing governance, community support, and a neutral home for their development. It does not provide cloud infrastructure services itself, nor does it develop proprietary technologies; instead, it fosters an ecosystem of interoperable, vendor-neutral projects. The CNCF also manages the Cloud Native Landscape and defines standards like the Open Container Initiative (OCI) for container runtimes and images, but its scope extends far beyond just standardizing container runtimes.

Answer

To provide cloud infrastructure services

Answer

To develop proprietary cloud technologies

Answer

To standardize container runtimes only

Question 8

Which CNCF project maturity level indicates that a project has successfully adopted the CNCF governance and is considered stable for production use?

Accepted Answer

Graduated. The Graduated maturity level is the highest in the CNCF project lifecycle, indicating that a project has both successfully adopted CNCF governance and is considered stable for production use. To achieve Graduated, a project must meet rigorous criteria including adoption by multiple end users, a defined governance structure, and completion of a security audit. This distinguishes it from lower maturity levels such as Sandbox (early-stage) and Incubating (growing but not yet stable).

Answer

Incubating

Answer

Experimental

Answer

Sandbox

Question 9

A development team wants to adopt a cloud-native architecture for a new application. Which set of principles BEST describes the cloud-native approach?

Accepted Answer

Microservices, containers, dynamic orchestration, and DevOps. Cloud-native architectures leverage microservices, containers, dynamic orchestration, and DevOps to enable scalable, resilient applications.

Answer

Service-oriented architecture, bare-metal servers, static scaling, and Agile

Answer

Monolithic applications, virtual machines, manual scaling, and waterfall development

Answer

Serverless functions, virtual machines, manual provisioning, and ITIL

Question 10

According to the 12-factor app methodology, how should an application store configuration that varies between deployments (e.g., database connection strings)?

Accepted Answer

In environment variables. The 12-factor app recommends strict separation of config from code, storing config in environment variables.

Answer

In a configuration file that is version-controlled

Answer

In a database table

Answer

Hard-coded in the application code

Question 11

A team is building a serverless application using Knative. They want the application to scale to zero when idle. Which Knative resource type should they use?

Accepted Answer

Knative Serving. Knative Serving manages serverless workloads and supports automatic scaling to zero when no requests are incoming.

Answer

Knative Trigger

Answer

Knative Build

Answer

Knative Eventing

Question 12

What is the primary purpose of a service mesh in a cloud-native architecture?

Accepted Answer

To provide a dedicated infrastructure layer for handling service-to-service communication. A service mesh provides observability, traffic management, and security for microservices communication, offloading these concerns from application code.

Answer

To compile application code

Answer

To replace container orchestration

Answer

To store application configuration

Question 13

In Istio, which component is responsible for enforcing traffic policies and collecting telemetry data at the pod level?

Accepted Answer

Envoy proxy. Envoy proxy is the correct answer because in Istio, each pod is deployed with an Envoy sidecar proxy that intercepts all inbound and outbound traffic. This proxy enforces traffic policies (e.g., routing rules, fault injection, rate limiting) and collects telemetry data (e.g., metrics, logs, traces) at the pod level, sending it to the observability backends. The sidecar model ensures policy enforcement and telemetry collection happen without modifying the application code.

Answer

Mixer

Answer

Pilot

Answer

Citadel

Question 14

Which GitOps tool is specifically designed for Kubernetes and follows the declarative GitOps pattern, continuously reconciling the desired state from a Git repository?

Accepted Answer

ArgoCD. ArgoCD is a declarative GitOps continuous delivery tool for Kubernetes that syncs application state with a Git repository.

Answer

Helm

Answer

Terraform

Answer

Jenkins

Question 15

An organization wants to manage infrastructure using code to ensure consistent and repeatable deployments across multiple cloud providers. Which tool is MOST suitable for this multi-cloud Infrastructure as Code approach?

Accepted Answer

Terraform. Terraform is a cloud-agnostic IaC tool that supports multiple providers, enabling consistent management across clouds.

Answer

Kuberntes manifests

Answer

AWS CloudFormation

Answer

Azure Resource Manager Templates