KCNA Kubernetes Fundamentals Practice Test 21 — 15 Questions

Question 1

You have a Service named 'my-svc' in namespace 'default'. A pod in namespace 'other' tries to reach it using the DNS name 'my-svc'. What is the correct DNS name for cross-namespace service discovery?

Accepted Answer

my-svc.default. For cross-namespace service discovery, the DNS name is ..svc.cluster.local. So, to reach 'my-svc' in namespace 'default' from another namespace, the correct DNS name is 'my-svc.default.svc.cluster.local'. A shorter form 'my-svc.default' also works.

Answer

my-svc

Answer

my-svc.other

Answer

my-svc.namespace

Question 2

Which TWO of the following are valid ways to expose a set of pods to traffic from outside the Kubernetes cluster?

Accepted Answer

Service of type NodePort. A Service of type NodePort exposes the service on a static port on each node's IP address. Traffic sent to that port on any cluster node is forwarded to the underlying service, making it accessible from outside the cluster without requiring a cloud load balancer.

Answer

Ingress

Answer

Service of type ExternalName

Answer

Service of type ClusterIP

Question 3

Which THREE of the following are valid Kubernetes resource types that can be used to store configuration data or secrets?

Accepted Answer

Secret. Option A is correct because a Secret is a dedicated Kubernetes resource type designed to store sensitive data, such as passwords, OAuth tokens, and SSH keys, in a base64-encoded format. Secrets are stored in etcd and can be mounted as volumes or exposed as environment variables, with optional encryption at rest to protect sensitive configuration data.

Answer

Volume

Answer

PersistentVolumeClaim

Answer

ServiceAccount

Question 4

Which TWO of the following are responsibilities of the kube-controller-manager?

Accepted Answer

Managing endpoint objects for Services. The kube-controller-manager runs controllers that handle routine tasks. The Node controller watches the health of nodes. The Endpoint controller (now EndpointSlice controller) manages endpoints for Services. Assigning pods to nodes is done by the scheduler. Storing cluster state is done by etcd. Serving the Kubernetes API is done by kube-apiserver.

Answer

Assigning pods to nodes

Answer

Storing cluster state

Answer

Serving the Kubernetes API

Question 5

Which Kubernetes component is responsible for storing the cluster state?

Accepted Answer

etcd. etcd is a distributed, consistent key-value store used by Kubernetes to store all cluster data, including configuration, state, and metadata. It is the single source of truth for the cluster; without etcd, the cluster cannot maintain or recover its state. The kube-apiserver is the only component that communicates directly with etcd, but it is etcd itself that physically stores the data.

Answer

kube-scheduler

Answer

kube-apiserver

Answer

kube-controller-manager

Question 6

What is the smallest deployable unit in Kubernetes?

Accepted Answer

Pod. The Pod is the smallest deployable unit in Kubernetes because it represents a single instance of a running process in the cluster and encapsulates one or more containers with shared storage and network resources. While containers are the runtime units, Kubernetes schedules and manages Pods, not individual containers, making the Pod the atomic building block for deployment.

Answer

Deployment

Answer

Container

Answer

Node

Question 7

A developer creates a Deployment with 3 replicas. The developer runs 'kubectl get pods' immediately after creation and sees that only 1 pod is in Running state, and the other 2 are Pending. What is the most likely reason for this?

Accepted Answer

The cluster does not have enough resources (CPU/memory) to schedule the additional pods. When a Pod remains in Pending state, it indicates that the scheduler cannot find a suitable node to place it. The most common cause is insufficient cluster resources (CPU or memory) to accommodate the additional Pods, as the scheduler checks node allocatable resources against Pod resource requests. With 2 out of 3 Pods pending, the cluster likely has enough resources for only one replica, leaving the others unscheduled.

Answer

The Deployment's YAML has a syntax error

Answer

The container image is not available on the worker nodes

Answer

The kubelet on the node is not running

Question 8

A team runs a stateless web application in Kubernetes. They have a Deployment named 'web-app' with 5 replicas. They want to ensure that a Service named 'web-svc' distributes traffic evenly to all healthy pods. Which type of Service should they use?

Accepted Answer

ClusterIP. A ClusterIP Service is the correct choice because it provides a stable virtual IP address and round-robin load balancing across healthy pods in the Deployment. By default, kube-proxy uses iptables or IPVS rules to distribute traffic evenly to all ready pod endpoints, ensuring stateless web application requests are balanced without requiring external exposure.

Answer

Headless Service

Answer

ExternalName Service

Answer

NodePort

Question 9

An administrator wants to update the image of a Deployment named 'my-app' from 'nginx:1.19' to 'nginx:1.20' with a rolling update strategy. They want to ensure that during the update, the number of unavailable pods never exceeds 1. Which field should they set in the Deployment spec?

Accepted Answer

spec.strategy.rollingUpdate.maxUnavailable. Option D is correct because `spec.strategy.rollingUpdate.maxUnavailable` controls the maximum number of Pods that can be unavailable during a rolling update. Setting this to 1 ensures that at most one Pod is unavailable at any time, meeting the administrator's requirement. This field is part of the Deployment's rolling update strategy and directly governs the availability guarantee during the update process.

Answer

spec.replicas

Answer

spec.minReadySeconds

Answer

spec.strategy.rollingUpdate.maxSurge

Question 10

A pod named 'db' in the 'default' namespace cannot connect to another pod named 'cache' in the 'prod' namespace via DNS. The service 'cache-svc' exists in the 'prod' namespace. What DNS name should the 'db' pod use to reach the 'cache-svc' service?

Accepted Answer

cache-svc.prod.svc.cluster.local. Option C is correct because Kubernetes DNS resolves services across namespaces using the format ..svc.cluster.local. Since the 'cache-svc' service is in the 'prod' namespace, the 'db' pod in the 'default' namespace must use 'cache-svc.prod.svc.cluster.local' to reach it. The default cluster domain is 'cluster.local', and the 'svc' subdomain is part of the standard DNS schema for services.

Answer

cache-svc.default

Answer

cache-svc.prod

Answer

cache-svc.default.svc.cluster.local

Question 11

A DevOps engineer has created a ConfigMap named 'app-config' with some configuration data. They want to make that data available as environment variables in a pod. Which field in the pod spec should they use to achieve this?

Accepted Answer

spec.containers[].envFrom. Option C is correct because the `envFrom` field in the container spec allows you to inject all key-value pairs from a ConfigMap (or Secret) as environment variables into the container. This is the most direct and efficient way to expose ConfigMap data as environment variables without needing to specify each key individually.

Answer

spec.volumes

Answer

spec.containers[].volumeMounts

Answer

spec.containers[].env

Question 12

A cluster administrator wants to ensure that a specific pod only runs on nodes that have an SSD for local storage. The nodes with SSDs have the label 'disk-type: ssd'. How should the administrator configure the pod to enforce this constraint?

Accepted Answer

Add a nodeSelector with 'disk-type: ssd' to the pod spec. Option B is correct because the `nodeSelector` field in a Pod spec is the standard Kubernetes mechanism for constraining a Pod to run only on nodes that match specific labels. By setting `nodeSelector: { disk-type: ssd }`, the scheduler will ensure the Pod is placed exclusively on nodes with that label, enforcing the administrator's requirement.

Answer

Add a toleration for node.kubernetes.io/disk-type: ssd

Answer

Use a readiness probe to check for SSD

Answer

Add an annotation 'disk-type: ssd' to the pod

Question 13

Which kubectl command can be used to view detailed information about a specific pod, including its current state, events, and resource usage?

Accepted Answer

kubectl describe pod . 'kubectl describe pod ' provides detailed information about a pod, including events, state, and configuration.

Answer

kubectl logs <pod-name>

Answer

kubectl exec <pod-name> -- /bin/sh

Answer

kubectl get pod <pod-name> -o yaml

Question 14

A pod is experiencing high memory usage. The administrator wants to enforce that the pod is terminated if it exceeds a memory limit and restarted automatically, but also wants to guarantee a minimum amount of memory for the pod. Which resource specification should be used in the container definition?

Accepted Answer

spec.containers[].resources.requests.memory and limits.memory. Option D is correct because setting both `requests.memory` and `limits.memory` guarantees a minimum memory allocation (the request) while enforcing a hard cap (the limit). If the pod exceeds the memory limit, it is terminated (OOMKilled) and, if part of a Deployment or StatefulSet, the controller automatically restarts it. This satisfies the requirement for both guaranteed minimum and enforced maximum with automatic restart.

Answer

spec.containers[].resources.requests.memory only

Answer

spec.containers[].resources.limits.memory and requests.cpu

Answer

spec.containers[].resources.limits.memory only

Question 15

Two pods, 'app-v1' and 'app-v2', both have a label 'app: myapp'. A Service 'my-service' has a selector 'app: myapp'. How many endpoints will the Service initially have?

Accepted Answer

2. Option A is correct because the Service's selector 'app: myapp' matches both pods 'app-v1' and 'app-v2', which both carry the label 'app: myapp'. The Service controller automatically creates endpoints for all pods matching the selector, regardless of their readiness state, unless a headless service or custom endpoint logic is involved. Initially, both pods are considered ready by default (unless a readiness probe fails), so the Service will have two endpoints.

Answer

1

Answer

0

Answer

Depends on pod readiness