KCNA Multiple Select — 40 Questions

Question 1

Which TWO of the following are characteristics of immutable infrastructure? (Select two.)

Accepted Answer

Servers are never modified after they are deployed. Immutable infrastructure means that once a server or container is deployed, it is never modified in place. If a change is needed, a new image is built and deployed, and the old instance is destroyed. This ensures consistency and eliminates configuration drift, which is a core principle of immutable deployments in Kubernetes and cloud-native environments.

Answer

Containers are used exclusively

Answer

Infrastructure is version-controlled and tested

Answer

Configuration updates are applied directly to running servers

Question 2

Which TWO of the following are valid ways to assign a pod to a specific node?

Accepted Answer

nodeSelector. `nodeSelector` is a simple, built-in field in the Pod spec that matches the pod to nodes with specific labels. When you add a `nodeSelector` with a key-value pair, the scheduler only places the pod on nodes that have that exact label. This is the most straightforward way to constrain a pod to a subset of nodes.

Answer

affinity: nodeAntiAffinity

Answer

tolerations

Answer

podSelector

Question 3

Which two of the following are true about ConfigMaps? (Select TWO.)

Accepted Answer

ConfigMaps are namespace-scoped. ConfigMaps are namespace-scoped objects (B) and can be mounted as volumes or exposed as environment variables (D).

Answer

ConfigMaps are automatically encrypted at rest

Answer

ConfigMaps can hold binary data

Answer

ConfigMaps are used to store sensitive configuration data

Question 4

Which TWO of the following are key characteristics of cloud-native applications? (Select two.)

Accepted Answer

Microservices architecture. Cloud-native applications are designed as microservices and use containers for deployment, enabling scalability and resilience.

Answer

Monolithic architecture

Answer

Manual scaling

Answer

Long-lived virtual machines

Question 5

Which TWO of the following are CNCF graduated projects? (Select 2)

Accepted Answer

Prometheus. Prometheus and Envoy are both CNCF graduated projects. CoreDNS is also graduated, but the question asks for two; Fluentd and Helm are both graduated as well, but the correct answers here are Prometheus and Envoy.

Answer

Kyverno

Answer

Knative

Answer

ArgoCD

Question 6

Which THREE of the following are true about the Open Container Initiative (OCI)? (Choose 3)

Accepted Answer

OCI defines both an image spec and a runtime spec. The OCI defines the image spec and runtime spec, ensuring interoperability between container tools. containerd is an OCI-compliant runtime. Docker images are OCI-compliant. Docker itself is not a runtime spec but a platform that uses runtimes.

Answer

Docker is an OCI runtime specification

Answer

OCI is governed by the Cloud Native Computing Foundation (CNCF)

Question 7

Which TWO statements about container images are correct? (Choose two.)

Accepted Answer

Container images can be stored in a registry like Docker Hub. Container images are built in layers and can be stored in registries. They are not immutable once built (they can be overwritten), and they include only the application and dependencies, not a full OS kernel.

Answer

Container images include a full operating system kernel

Answer

Container images are immutable once built

Answer

Container images can only be built on Linux

Question 8

Which THREE of the following are features typically provided by a service mesh? (Choose three.)

Accepted Answer

Observability through metrics and tracing. Service mesh provides traffic management (routing, canary releases), observability (metrics, tracing), and security (mTLS, authorization). Auto-scaling is handled by Horizontal Pod Autoscaler or custom metrics, not by the service mesh. Service discovery is often built into Kubernetes itself, though service mesh can enhance it, but it's not a core feature.

Answer

Auto-scaling of pods based on CPU

Answer

Service discovery

Question 9

Which TWO of the following are examples of Infrastructure as Code (IaC) tools? (Choose 2.)

Accepted Answer

Terraform. Terraform and Pulumi are popular IaC tools that allow infrastructure provisioning via code.

Answer

kubectl

Answer

Helm

Answer

Docker Compose

Question 10

Which TWO are benefits of using a service mesh? (Choose two.)

Accepted Answer

Observability of service-to-service communication. Service mesh provides observability (e.g., metrics, tracing) and traffic management (e.g., routing, retries) between services.

Answer

Automatic database scaling

Answer

Container image building

Answer

Load balancing of external requests

Question 11

Which TWO of the following tools are commonly used for distributed tracing in cloud-native environments? (Select two.)

Accepted Answer

Zipkin. Jaeger and Zipkin are popular open-source distributed tracing systems.

Answer

Grafana

Answer

Fluentd

Answer

Prometheus

Question 12

Which THREE of the following are important considerations when defining SLOs (Service Level Objectives)? (Select three.)

Accepted Answer

They must be aligned with business impact. SLOs should be based on SLIs, define a target (e.g., 99.9%), and include a measurement window. Cost is not a direct consideration for SLO definition.

Answer

They should include an error budget

Answer

They should minimize infrastructure cost

Question 13

Which TWO of the following are common log aggregation tools used in Kubernetes environments? (Select two)

Accepted Answer

Fluentd. Fluentd and Fluent Bit are both popular log aggregators and forwarders in Kubernetes. Loki is a log storage system, not an aggregator.

Answer

Loki

Answer

Prometheus

Answer

Jaeger

Question 14

Which THREE are valid container runtimes that implement the Kubernetes CRI? (Choose three.)

Accepted Answer

Docker (via dockershim, deprecated). containerd, CRI-O, and Docker (via dockershim, deprecated) implement CRI. rkt is discontinued and not CRI-compliant; runc is a low-level runtime, not a CRI implementation.

Answer

runc

Answer

rkt

Question 15

Which TWO of the following are recommended practices for achieving observability in a Kubernetes cluster?

Accepted Answer

Include correlation IDs in structured logs to enable tracing across services.. Including correlation IDs in structured logs is a key observability practice that enables distributed tracing across microservices. In Kubernetes, where requests often traverse multiple pods and services, correlation IDs allow you to link logs from different components into a single transaction flow, which is essential for debugging and understanding system behavior.

Answer

Use a single centralized logging solution to aggregate logs from all components.

Answer

Store all debug logs for a minimum of 90 days for compliance.

Answer

Disable leader election for monitoring components to reduce complexity.

Question 16

Which THREE of the following are true about the Open Container Initiative (OCI)? (Select 3)

Accepted Answer

OCI defines the container image format specification. The Open Container Initiative (OCI) defines the Image Specification, which standardizes the format and content of container images. This ensures that any OCI-compliant image can be run by any OCI-compliant runtime, enabling interoperability across different container platforms.

Answer

OCI is governed solely by Docker Inc.

Answer

OCI only applies to Linux containers

Question 17

Which THREE of the following are important security practices in a container image CI/CD pipeline?

Accepted Answer

Signing images to ensure integrity. Image scanning, signing, and using minimal base images are key security practices. Hardcoding credentials and running containers as root are anti-patterns.

Answer

Hardcoding credentials in the image

Answer

Running containers as root user

Question 18

Which TWO of the following are benefits of using Helm for managing Kubernetes applications?

Accepted Answer

Templating engine for parameterizing Kubernetes manifests. Helm provides templating for reusable configurations and allows for easy rollback to previous releases.

Answer

Automatic scaling of pods based on CPU usage

Answer

Native integration with service mesh for traffic splitting

Answer

Built-in support for canary deployments

Question 19

Which TWO tools are commonly used for GitOps? (Choose two.)

Accepted Answer

Flux. ArgoCD and Flux are two popular GitOps tools that automate deployment of applications from Git repositories.

Answer

Jenkins

Answer

Helm

Answer

Terraform

Question 20

Which TWO of the following are benefits of implementing progressive delivery techniques (e.g., canary releases)?

Accepted Answer

Allows testing new features with a subset of users. Progressive delivery reduces risk by gradual rollout and provides the ability to test new versions with a subset of users. It does not eliminate the need for monitoring nor does it replace CI/CD pipelines.

Answer

Replaces the need for a CI/CD pipeline

Answer

Eliminates the need for monitoring and alerting

Answer

Guarantees zero downtime