CKA Practice Question: Cluster Architecture, Installation and Configuration
Which command is used to backup etcd data using etcdctl?
⚠ Common exam trap
It's easy for candidates to confuse the deprecated v2 `etcdctl backup` command with the correct v3 `etcdctl snapshot save` command, or they assume any 'export' or 'dump' verb is sufficient for a full backup.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
etcdctl snapshot save
`etcdctl snapshot save` is the official command in etcdctl v3 to create a point-in-time backup of the etcd data store. This command captures the entire key-value store and metadata into a snapshot file, which can later be restored using `etcdctl snapshot restore` to recover the cluster state.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
etcdctl backup
Why it's wrong here
etcdctl backup is not a recognized subcommand in the modern etcdctl v3 CLI. Invoking it returns an unknown-command error, because the etcd maintainers consolidated backup functionality under the snapshot command family. The correct way to back up a live cluster is to run etcdctl snapshot save.
- ✗
etcdctl export
Why it's wrong here
etcdctl export is not a standard snapshot/backup subcommand and is often confused with exporting raw key-value data from an etcd database, not the consistent, restorable snapshot format that etcdctl snapshot save produces. Running it would not give you a file that can be passed to etcdctl snapshot restore for disaster recovery.
- ✓
etcdctl snapshot save
Why this is correct
etcdctl snapshot save <filename> is the canonical etcd backup operation: it connects to the etcd endpoint (default https://127.0.0.1:2379), takes a consistent point-in-time snapshot of the keyspace, and writes it to the specified file. The resulting snapshot is the input used by etcdctl snapshot restore to rebuild a cluster, and it should be created with endpoint, CA, cert, and key flags when TLS is enabled.
- ✗
etcdctl dump
Why it's wrong here
etcdctl dump is not a valid etcdctl command at all; it appears in no version of the etcdctl help output. Dump-style utilities exist for MySQL or Redis but not for etcd, so attempting this command would fail before any backup is taken. The v3 API intentionally uses the snapshot subcommand to make the backup intent explicit.
Go deeper
Related to this question
About these practice questions
Courseiva writes every CKA question from scratch — 302 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CKA practice question is part of Courseiva's free CNCF certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CKA exam.