CKA Practice Question: Cluster Architecture, Installation and Configuration
What is the purpose of the kube-proxy component?
⚠ Common exam trap
Many exam-takers confuse kube-proxy with an API proxy or ingress controller, but kube-proxy specifically handles Service-level network rules at the node level, not application-layer routing or API request proxying.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
It manages network rules for Services and endpoints
B is correct because kube-proxy is the component responsible for implementing the network rules that enable Kubernetes Services to function. It runs on each node and maintains iptables or IPVS rules to route traffic to the correct backend Pods based on the Service's endpoints, handling load balancing and service discovery at the network layer.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
It proxies API requests to the kube-apiserver
Why it's wrong here
kube-proxy does not proxy requests to the control plane. Its role is to maintain network connectivity for Pods and Services by programming kernel forwarding rules, not to forward kubectl, REST, or API traffic. API requests are handled by the kube-apiserver itself, often fronted by a load balancer or ingress, so kube-proxy is unrelated to that data path.
- ✓
It manages network rules for Services and endpoints
Why this is correct
kube-proxy implements the Service abstraction by writing network rules — typically iptables or IPVS — that distribute traffic destined for a Service's clusterIP among its backing Pod endpoints. It watches the API for Services and EndpointSlices, then updates these rules so that connections are load-balanced and reachable from within the cluster. This is the core purpose of the component.
- ✗
It stores cluster state
Why it's wrong here
Persistent cluster state, including all object definitions, configuration, and actual desired state, is stored in etcd, a distributed key-value store. kube-proxy keeps no authoritative state; it only consumes watch events from the API server and applies transient kernel-level rules on each node. Therefore, attributing state storage to kube-proxy confuses the data plane with the control plane's persistence layer.
- ✗
It schedules pods to nodes
Why it's wrong here
Pod placement is the responsibility of the kube-scheduler, which evaluates resource requests, constraints, affinity rules, and taints when assigning Pods to nodes. kube-proxy runs on every node but never makes scheduling decisions; it only reacts to already-scheduled Pods and Services by configuring network rules. The scheduling process happens before the kubelet starts the Pod, and kube-proxy is absent from that decision path.
Go deeper
Related to this question
Learn chapter
Kubernetes Architecture Overview
Key term
Kubernetes Services
A Kubernetes Service is a stable network endpoint that connects a set of pods to internal or external traffic, providing consistent access even as pods change.
Key term
Ingress Resources
Ingress Resources are Kubernetes API objects that manage external access to services inside a cluster, typically HTTP and HTTPS traffic, by defining rules for routing requests based on hostnames and paths.
About these practice questions
One of 302 original CKA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CKA practice question is part of Courseiva's free CNCF certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CKA exam.