Back to Certified Kubernetes Administrator CKA questions

Scenario-based practice

Drag and Drop Matching Questions

Practise Certified Kubernetes Administrator CKA practice questions — original exam-style scenarios covering every exam domain, with detailed explanations, wrong-answer analysis, and common exam traps.

10
scenario questions
CKA
exam code
CNCF
vendor

Scenario guide

How to approach drag and drop matching questions

Matching questions give you two columns — concepts, commands, or protocols on the left, and their definitions or use-cases on the right. You drag each left item to its correct match. These appear on most certification exams and punish superficial memorisation.

Quick answer

Drag and Drop Matching Questions questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Related practice questions

Related CKA topic practice pages

Scenario questions usually connect to one or more exam topics. Use these links to review the underlying concepts behind the scenario.

Practice set

Practice scenarios

Question 1mediummatching
Full question →

Match each troubleshooting scenario to its likely cause.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Insufficient resources or unschedulable Node

Application crashes repeatedly

Missing or incorrect Endpoint selector labels

Kubelet not reporting or network issue

Invalid image name or registry authentication failure

Question 2mediummatching
Full question →

Match each security context setting to its effect.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Specifies the user ID for the container's process

Prevents running as root (UID 0)

Grants elevated privileges to the container

Makes the container's root filesystem read-only

Adds or drops Linux capabilities

Question 3mediummatching
Full question →

Match each storage concept to its definition.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Request for storage by a user

Describes storage provisioner and parameters

Mounts a file or directory from the host Node

Temporary storage that shares a Pod's lifecycle

Standard interface for storage plugins

Question 4mediummatching
Full question →

Match each scheduling concept to its description.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Simple label-based constraint

Expressive scheduling rules using labels

Repels Pods unless they tolerate the taint

Allows a Pod to be scheduled on a tainted Node

Determines scheduling precedence based on priority class

Question 5mediummatching
Full question →

Match each kubectl command to its purpose.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Create or update resources from a file

Create a Service for a resource

Manage deployment rollouts

Safely evict Pods from a Node

Display resource usage metrics

Question 6mediummatching
Full question →

Match each Kubernetes resource to its primary function.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Smallest deployable unit, runs containers

Stable network endpoint for a set of Pods

HTTP/HTTPS routing to Services

Non-sensitive configuration data

Storage resource provisioned by an administrator

Question 7mediummatching
Full question →

Match each network policy concept to its description.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Controls incoming traffic to Pods

Controls outgoing traffic from Pods

Selects Pods to which the policy applies

Specifies whether rules apply to Ingress, Egress, or both

Isolates all Pods in a namespace by default

Question 8mediummatching
Full question →

Match each logging/monitoring component to its role.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Log aggregator and forwarder

Metrics collection and alerting system

Dashboard and visualization tool

Exposes cluster object metrics

Provides resource usage metrics for autoscaling

Question 9mediummatching
Full question →

Match each etcd operation to its description.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Store a key-value pair

Retrieve value for a key

Create a backup of the datastore

List all etcd cluster members

Check health of etcd endpoints

Question 10mediummatching
Full question →

Match each cluster upgrade step to its purpose.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Update the cluster bootstrap tool

Update the node agent

Evict Pods gracefully before upgrade

Update API server, scheduler, controller-manager

Allow Pods to be scheduled again after upgrade

These CKA practice questions are part of Courseiva's free CNCF certification practice question bank. Courseiva provides original exam-style CKA questions with detailed explanations, topic-based practice, mock exams, readiness tracking, and study analytics.