Reinforce PCA concepts with active-recall study cards covering all 5 blueprint domains. Each card shows the question on the front and the correct answer with a full explanation on the back.
Flashcards work through active recall — the process of retrieving information from memory rather than passively re-reading it. Research consistently shows that active recall produces stronger, longer-lasting memory than re-reading study guides. For PCA preparation, this means flashcards are one of the highest-return study tools available.
Attempt recall first
Read the PCA question on each card, pause, and attempt to formulate the answer in your own words before revealing. This retrieval attempt — even if wrong — dramatically strengthens memory compared to immediately reading the answer.
Review wrong cards again
When you get a card wrong, note it and add it back to your review pile. Spaced repetition — seeing difficult cards more frequently — is the mechanism that makes flashcard study far more efficient than linear reading.
Study by domain
Group your PCA flashcard sessions by domain for the first 3–4 weeks. Master one domain before moving to the next. In the final week, shuffle all cards together to test cross-domain recall — which is what the real PCA exam requires.
Short sessions beat marathon reviews
20–30 flashcard cards per session, done daily, produces better retention than a single 200-card marathon session. Five short daily sessions per week over 4 weeks gives you over 400 total card reviews — enough to reliably pass PCA.
Sample cards from the PCA flashcard bank. Read the question, think of the answer, then read the explanation below.
How does PromQL handle operator precedence between arithmetic operators like multiplication (*) and addition (+)?
Multiplication has higher precedence than addition.
PromQL follows standard mathematical order of operations, where multiplication and division take precedence over addition and subtraction.
When configuring Alertmanager to send notifications to Slack, which block defines the routing tree?
route
In Alertmanager's configuration, the route block defines the routing tree that determines how alerts are grouped and which receiver they are sent to. It is the top-level entry point (with child routes for matching) that evaluates alert labels against matchers and dispatches notifications accordingly.
You are deploying Prometheus in a cluster with highly dynamic ephemeral pods. Which concern is the most significant regarding cardinality?
The memory overhead of storing time series with unique label sets.
Cardinality in Prometheus is driven by the number of unique label combinations, and each unique time series consumes memory in the head block (in-memory TSDB) regardless of scrape frequency. Ephemeral pods with dynamic labels (pod UID, container ID, ephemeral IPs) create a churn of new series that accumulate in memory, causing OOM kills and slow queries. This memory overhead is the dominant concern.
You have a Prometheus alerting rule that triggers too frequently during flapping states. Which feature should you use to prevent this without silencing the alert entirely?
The 'for' field
The 'for' field in a Prometheus alerting rule specifies how long the condition must be true before the alert fires. By setting a duration (e.g., '5m'), it prevents alerts from triggering during brief flapping states, as the condition must persist for that period. This reduces noise without silencing the alert entirely.
Your application has a short-lived batch job that finishes before the Prometheus server can scrape it. What architectural component should be used?
Pushgateway
The Pushgateway is designed to allow ephemeral and batch jobs to expose their metrics to Prometheus.
What is the default retention period for Prometheus data?
15 days
The default retention for local Prometheus storage is 15 days.
When using a Prometheus client library to instrument a Go application, which function call is typically used to register a new metric?
prometheus.MustRegister()
In Prometheus client libraries for Go, the prometheus.MustRegister() function is used to register a new metric with the default registry. It panics if the registration fails, ensuring that metrics are properly registered at startup. This is the typical way to make metrics available for scraping.
What is 'Monitoring Philosophy' regarding alerts?
Alert on symptoms, not causes.
The 'Monitoring Philosophy' in Google Cloud's operations suite (formerly Stackdriver) emphasizes alerting on symptoms—user-visible issues like high latency or error rates—rather than on causes such as CPU spikes or disk I/O. This approach reduces alert noise and focuses on what actually impacts users, aligning with SRE principles. By alerting on symptoms, you avoid false positives from normal fluctuations and ensure that alerts are actionable and tied to service level objectives (SLOs).
You need to prevent an alert from firing if a maintenance window is active. How should you approach this in Alertmanager?
Use a Silence
Silences are the standard way to prevent specific alerts from firing during a known maintenance period.
What is the purpose of the 'up' metric?
To indicate if a target is reachable
The 'up' metric is 1 if the target was successfully scraped and 0 otherwise.
You need to calculate the 99th percentile HTTP request latency from a Prometheus histogram named http_request_duration_seconds. Which function is correct?
histogram_quantile(0.99, rate(http_request_duration_seconds_bucket[5m]))
The correct PromQL expression is histogram_quantile(0.99, rate(http_request_duration_seconds_bucket[5m])). This computes the 99th percentile by first calculating the per-second rate of increase of each bucket over a 5-minute window, then applying histogram_quantile to interpolate the quantile from the bucket boundaries. The rate function is essential to convert cumulative counters into a rate suitable for quantile estimation.
Which function is used to convert a counter rate into a per-second rate over a time range?
rate()
rate() is the standard function for per-second rates of counters.
You are troubleshooting high cardinality in your metrics. What is a common cause for this in a custom exporter?
Including dynamic values like IDs or timestamps in label values.
High cardinality occurs when a label value has an unbounded number of unique values (like a request ID or a timestamp), causing a massive explosion in the number of unique time series.
A Prometheus administrator wants to query the current value of the metric 'http_requests_total'. Which of the following PromQL expressions should be used?
http_requests_total
The expression `http_requests_total` is a valid PromQL instant vector selector that returns the current value of the metric at the evaluation timestamp. It does not require a range or function because the question asks for the current value, not a rate or aggregation. This is the simplest and correct way to query a single metric's latest sample.
How does Prometheus handle subqueries embedded within an instant query, such as rate(http_requests_total[5m])[30m:1m]?
It runs the inner instant query at multiple evaluation timestamps over the specified range at the given resolution, returning a range vector.
Prometheus evaluates subqueries by running the inner instant query at each step of the outer range, using the specified resolution (1m) and range (30m). This produces a range vector that can then be used by outer functions like rate(). The subquery syntax [30m:1m] means evaluate the inner expression over the last 30 minutes at 1-minute intervals.
You need to send critical alerts to a specific Slack channel while warning alerts go to email. Where should this routing logic be defined?
In the Alertmanager 'route' configuration
The Alertmanager 'route' configuration is where routing logic is defined. It uses a tree of routes with matchers (e.g., severity='critical') to direct alerts to specific receivers (e.g., Slack for critical, email for warning). This is the core mechanism for conditional alert routing in Prometheus-based monitoring.
In Alertmanager, what is the role of the 'continue' field in a route?
To force the alert to be sent to multiple routes
The 'continue' field in an Alertmanager route, when set to true, allows the alert to continue matching subsequent sibling routes. This means the alert can be sent to multiple receivers, effectively forcing it to be routed to multiple destinations.
You need to monitor the availability of a specific web endpoint from external locations using blackbox_exporter. What is the primary purpose of the 'module' configuration in blackbox_exporter?
To define the protocol-specific behavior and parameters for the probe.
In blackbox_exporter, a module defines the protocol-specific behavior and parameters for a probe, such as HTTP, TCP, ICMP, or DNS. It specifies details like the HTTP method, headers, expected status codes, timeouts, and TLS settings. This allows the exporter to perform customized checks for different types of endpoints.
What is the purpose of the instant vector selector syntax http_requests_total{job="api-server"}?
It selects current values of time series matching the metric name and label filter.
The instant vector selector http_requests_total{job="api-server"} returns the most recent sample value for every time series whose metric name is http_requests_total and whose job label equals 'api-server'. It is evaluated at a single point in time (the query evaluation timestamp), producing one value per matching series rather than a range of samples. This is the fundamental building block for PromQL queries that feed into functions like rate(), sum(), or comparison operators.
What is the purpose of 'labels' in Prometheus?
To identify unique time series.
Labels provide metadata to metrics, allowing for multi-dimensional querying and filtering (e.g., job='web', instance='1.2.3.4').
Which function is best suited for identifying the 'top 5' instances with the highest value for a specific metric?
topk(5, metric)
topk(5, metric) is the PromQL aggregation operator that returns the 5 time series with the highest instantaneous values for the given metric, which is exactly what is needed to identify the top 5 instances. It operates as an aggregation over the sample set at each evaluation step, preserving the labels of the winning series so you can see which instance is which. This is the canonical way to build 'top N' dashboards or alerts in Prometheus.
The PCA flashcard bank covers all 5 official blueprint domains published by CNCF / Linux Foundation. Cards are distributed proportionally, so domains with higher exam weight have more cards.
Domain Coverage
Promql
Prometheus Fundamentals
Observability Concepts
Alerting And Dashboarding
Instrumentation And Exporters
Both flashcards and practice questions are evidence-based study tools. The difference is in what they train:
Flashcards — concept retention
Best for memorising definitions, acronyms, protocol behaviours, command syntax, and conceptual distinctions. Use flashcards to build the foundational vocabulary that PCA questions assume you know.
Best in: weeks 1–3
Practice tests — application
Best for applying concepts to realistic scenarios, eliminating distractors, and building exam stamina.PCA questions test scenario reasoning — not just recall — so practice tests are essential.
Best in: weeks 3–6
The most effective PCA study plan combines both: use flashcards for the first 2–3 weeks to build conceptual foundations, then shift to practice tests and mock exams in the final 2–3 weeks to apply and benchmark that knowledge. Most candidates who pass on their first attempt use both tools.
Yes. Courseiva provides free PCA flashcards across all official exam domains. Every card includes the correct answer and a full explanation of why it is right and why the distractors are wrong. The platform also includes topic-based practice, mock exams, and readiness tracking — no account required.
Courseiva has 265+ original PCA flashcards across all 5 exam blueprint domains. New cards are added regularly as the question bank grows. All cards are checked against the official CNCF / Linux Foundation exam objectives, with editorial oversight from an experienced network and security engineer.
Courseiva flashcards are purpose-built for IT certification exams. Unlike generic flashcard platforms where content quality varies, every Courseiva card is mapped to the official PCA exam blueprint, written by engineers who hold the certification, and includes a full explanation of the correct answer and why the distractors are wrong. This explanation quality is what separates genuine learning from rote memorisation.
Courseiva is a web platform — an internet connection is required. For offline study, we recommend creating free Courseiva account, using the platform in your browser, and using your device's offline capabilities if your browser supports offline web apps.
Save your results, see which domains need more work, and get spaced repetition recommendations — all free.
Sign Up FreeFree forever · Every certification included