Which command would you use to view all events in the cluster sorted by timestamp?
Shows all events in the cluster sorted by last timestamp.
Why this answer
Option D is correct because `kubectl get events` retrieves all cluster events, which are Kubernetes API objects that record state changes and errors. By default, events are sorted by their `lastTimestamp` field, making this the direct command to view events ordered by timestamp.
Exam trap
The trap here is that candidates confuse `kubectl get events` with `kubectl describe events` or assume `kubectl top` or `kubectl logs` can retrieve events, but only `kubectl get events` provides a sorted list of all cluster events by timestamp.
How to eliminate wrong answers
Option A is wrong because `kubectl top events` is not a valid kubectl command; `kubectl top` is used for resource usage metrics (e.g., `kubectl top node`), not events. Option B is wrong because `kubectl logs --events` is invalid; `kubectl logs` retrieves container logs, not cluster events, and the `--events` flag does not exist for this command. Option C is wrong because `kubectl describe events` is not a valid subcommand; `kubectl describe` works on resource types like `events` (e.g., `kubectl describe events`), but it shows details of a specific event or a filtered set, not a sorted list of all events.