Courseiva
Free · No account needed · No credit card

Certified Kubernetes Administrator CKA Practice Test

726 questions with instant explanations, domain breakdown, and wrong-answer analysis. Built for the real exam.

Start 25-Question Practice — FreeExam Simulation — 17 questions · 120 min
Instant feedback after each answer
Full explanations included
Domain score breakdown
Real exam: 120 min

Sample questions with explanations

This is exactly what you see during practice — question, options, and a full explanation after you answer.

Q1Cluster Architecture, Installation and Configurationmedium
Full explanation →

A user needs to deploy a pod that requires access to the Kubernetes API server from within the pod. Which resource should be used to provide authentication credentials automatically?

ServiceAccountCorrect
BSecret
CConfigMap
DClusterRoleBinding

A ServiceAccount is the correct resource because Kubernetes automatically mounts a projected volume containing a JWT token into pods that use the default or a specified ServiceAccount. This token is used by the pod to authenticate against the Kubernetes API server, enabling secur…Read full explanation

Q2Cluster Architecture, Installation and Configurationmedium
Full explanation →

A developer needs to create a Role that allows listing pods in the 'dev' namespace. Which YAML snippet correctly defines this Role?

AapiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: pod-lister rules: - apiGroups: [""] resources: ["pods"] verbs: ["list"]
BapiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: name: pod-lister-binding namespace: dev subjects: - kind: User name: dev-user roleRef: kind: Role name: pod-lister apiGroup: rbac.authorization.k8s.io
apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: pod-lister namespace: dev rules: - apiGroups: [""] resources: ["pods"] verbs: ["list"]Correct
DapiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: pod-lister rules: - apiGroups: [""] resources: ["pods"] verbs: ["get"]

It defines a Role (not ClusterRole) scoped to the 'dev' namespace with the 'list' verb on 'pods', which matches the requirement exactly. In Kubernetes RBAC, a Role grants permissions within a specific namespace, and the empty apiGroups string [""] refers to the core API group whe…Read full explanation

Q3Cluster Architecture, Installation and Configurationhard
Full explanation →

A ServiceAccount 'monitor-sa' needs to be able to list Pods in namespace 'monitoring'. Which RBAC configuration is appropriate?

ACreate a ClusterRole with 'get' and 'list' verbs on pods, then a ClusterRoleBinding to monitor-sa
BAdd the ServiceAccount to the cluster-admin group
CCreate a Role in default namespace with 'get' and 'list' verbs on pods, then a RoleBinding in 'monitoring' to monitor-sa
Create a Role in namespace 'monitoring' with 'get' and 'list' verbs on pods, then a RoleBinding in 'monitoring' to monitor-saCorrect

A Role in the 'monitoring' namespace with 'get' and 'list' verbs on pods, combined with a RoleBinding in the same namespace to the 'monitor-sa' ServiceAccount, grants the exact permissions required within the scope of that namespace. This follows the principle of least privilege …Read full explanation

Start your practice session — it's free

Untimed Practice

Answer at your own pace. Explanation and domain tag shown immediately after each answer.

10Quick20~20 min25Recommended30~30 min40~40 min50~50 min60~60 min75~75 min100~100 min120~120 min

Timed Practice

Countdown timer starts immediately. Results and domain scores shown at the end — just like the real exam.

1010 min2020 min2525 min3030 min4045 min5060 min6075 min7575 min100120 min120150 min

Why practice here?

Full explanations on every question

Not just the right answer — you get exactly why each wrong option is wrong, so you learn the concept, not the answer.

Domain score breakdown

After each session see your score by exam domain so you know exactly where to focus study time.

100% free, forever

No subscription, no trial, no email wall. Start a session in under 10 seconds.

Exam-style questions

Scenario-based, precise wording, realistic distractors — written to match what you actually see on exam day.

← All CKA questionsCKA exam guideStudy guidePractice by domain