CKA Practice Question: Cluster Architecture, Installation and Configuration
Which kubeconfig context field defines the set of users, clusters, and namespaces for kubectl operations?
⚠ Common exam trap
Many exam-takers confuse the `contexts` field with the `current-context` field or think that `namespaces`, `clusters`, or `users` individually define the full operational scope, when in fact only the context object combines all three.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
contexts
The `contexts` field in a kubeconfig file defines a named context that bundles together a specific cluster, user, and default namespace. When you run `kubectl` commands, the current context determines which cluster to authenticate against, which user credentials to use, and which namespace to operate in by default. This is why option A is correct.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
contexts
Why this is correct
In a kubeconfig file, the `contexts` field is a list of named context objects, each holding three keys: `cluster`, `user`, and optionally `namespace`. The context is the only construct that binds a specific user to a specific cluster, and it can also set a default namespace for kubectl commands. Therefore, the `contexts` field is what defines the full set of user-to-cluster associations.
- ✗
namespaces
Why it's wrong here
Namespaces are a Kubernetes API resource used to group and isolate objects inside a cluster, not a top-level kubeconfig field. While a context may include a `namespace` key to set the default namespace for that context, the kubeconfig does not have a `namespaces` section that defines users. Selecting this option confuses the resource-level namespace with the structure of a kubeconfig.
- ✗
clusters
Why it's wrong here
The `clusters` section in a kubeconfig describes connection endpoints: each entry includes a server URL and often certificate-authority data for verifying the cluster's API server. This section defines where to connect, but it contains no user credentials and no binding to any identity. A cluster only becomes usable when a context references it together with a user.
- ✗
users
Why it's wrong here
The `users` section stores authentication credentials, such as client certificates, tokens, or `exec` authentication plugin configurations. This section defines who is attempting to authenticate, but by itself it says nothing about which cluster that user should access. Users are not associated with clusters until a context explicitly references both a user and a cluster.
Go deeper
Related to this question
About these practice questions
One of 302 original CKA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CKA practice question is part of Courseiva's free CNCF certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CKA exam.