CKA · topic practice

Cluster Architecture, Installation and Configuration practice questions

Q: How should I use these Cluster Architecture, Installation and Configuration practice questions?

Read each scenario carefully and choose your answer before revealing the explanation. Then check why your choice was right or wrong. Repeat until the reasoning feels automatic.

Q: Can I practise just Cluster Architecture, Installation and Configuration questions in a focused session?

Yes — use the session launcher on this page to start a 10-, 20-, 30- or 50-question session drawn entirely from the Cluster Architecture, Installation and Configuration domain.

Practise Certified Kubernetes Administrator CKA Cluster Architecture, Installation and Configuration practice questions — original exam-style scenarios with answer choices, explanations, and analysis of common mistakes.

Courseiva uses original exam-style practice questions designed for learning and revision. The goal is to understand the concepts, recognise exam patterns, and improve through explanations — not memorise copied exam dumps.

Reviewed byJohnson Ajibi· MSc IT Security

20 questionsDomain: Cluster Architecture, Installation and Configuration

Practice 10 questions Browse domain →

What the exam tests

What to know about Cluster Architecture, Installation and Configuration

Cluster Architecture, Installation and Configuration questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Watch out for

Common Cluster Architecture, Installation and Configuration exam traps

▸Answering from memory before reading the full scenario.
▸Missing a constraint such as cost, availability, security, scope or command context.
▸Choosing a broad answer when the question asks for the most specific fix.
▸Ignoring why the wrong options are tempting.

Practice set

Cluster Architecture, Installation and Configuration questions

20 questions · select your answer, then reveal the explanation

Question 1easymultiple choice

Read the full Cluster Architecture, Installation and Configuration explanation →

Which control plane component is responsible for storing the cluster state and configuration?

Trap 1: kube-controller-manager

kube-controller-manager runs controllers but does not store state.

Trap 2: kube-apiserver

kube-apiserver exposes the Kubernetes API but does not store data.

Trap 3: kube-scheduler

kube-scheduler assigns pods to nodes but does not store cluster state.

Study all Cluster Architecture, Installation and Configuration common traps →

A
etcd
etcd is the store for all cluster state and configuration.
B
kube-controller-manager
Why wrong: kube-controller-manager runs controllers but does not store state.
C
kube-apiserver
Why wrong: kube-apiserver exposes the Kubernetes API but does not store data.
D
kube-scheduler
Why wrong: kube-scheduler assigns pods to nodes but does not store cluster state.

Cluster Architecture, Installation and Configuration practice questions

What to know about Cluster Architecture, Installation and Configuration

Common Cluster Architecture, Installation and Configuration exam traps

Cluster Architecture, Installation and Configuration questions

Which control plane component is responsible for storing the cluster state and configuration?

An administrator runs 'kubectl drain node01 --ignore-daemonsets --force' to prepare node01 for maintenance. However, a pod running a critical application is evicted and becomes unschedulable. Which flag could prevent eviction of that specific pod?

A cluster was upgraded from v1.28 to v1.29 using kubeadm. After upgrading the control plane, nodes remain at v1.28. What is the correct next step to upgrade a worker node?

An administrator creates a ServiceAccount named 'monitor' in the 'default' namespace. They want any pod using this ServiceAccount to be able to list pods cluster-wide. Which RBAC resource should be created and bound to this ServiceAccount?

You want to upgrade the control plane from v1.28.0 to v1.29.0 using kubeadm. After upgrading kubeadm on the control plane node, which command should you run first?

Which component runs on every node in a Kubernetes cluster and ensures containers are running in a pod?

A user reports that they can't authenticate to the cluster using a kubeconfig file. Running 'kubectl config view' shows the current context points to a user with client certificate and key. Which command checks the expiration date of the client certificate?

An admin runs 'kubectl get pods' and sees a pod in 'Pending' state for a long time. 'kubectl describe pod' shows '0/1 nodes are available: 1 node has memory pressure'. Which is the most likely cause?

A cluster is running etcd without TLS. The admin wants to take a snapshot backup. Which command is correct?

Which command creates a kubeconfig file that can be used to authenticate as a specific user?

A pod's YAML specifies 'restartPolicy: Never' and the container exits with code 0. What state will the pod be in?

To make a node unschedulable without evicting existing pods, which command should be used?

Which TWO components are part of the Kubernetes control plane? (Select 2)

Which THREE are valid steps when upgrading a Kubernetes cluster using kubeadm? (Select 3)

Which THREE are valid methods to authenticate a user to the Kubernetes API server? (Select 3)

You are preparing to upgrade a Kubernetes cluster from v1.27 to v1.28 using kubeadm. What is the correct order of operations for upgrading the control plane nodes?

An administrator runs 'kubectl get nodes' and sees that one node is in the 'NotReady' state. Which component should be checked FIRST to diagnose the issue?

Which command is used to take a snapshot of etcd using etcdctl?

A user needs to deploy a pod that requires access to the Kubernetes API server from within the pod. Which resource should be used to provide authentication credentials automatically?

Which kubectl command is used to mark a node as unschedulable for new pods without affecting existing running pods?

Track your progress over time

Start a Cluster Architecture, Installation and Configuration only practice session

Related CKA topic practice pages

Cluster Architecture, Installation and Configuration practice questions

Services and Networking practice questions

Workloads and Scheduling practice questions

Storage practice questions

Troubleshooting practice questions

Cluster Architecture, Installation & Configuration practice questions

Workloads & Scheduling practice questions

Services & Networking practice questions

CKA fundamentals practice questions

CKA scenario practice questions

CKA troubleshooting practice questions

Frequently asked questions

Track your progress

Study resources

Exam traps to avoid