Courseiva
TroubleshootingmediumMultiple ChoiceObjective-mapped

CKA Troubleshooting Practice Question

You run 'kubectl get nodes' and see that one node is in the 'NotReady' state. Which command would you use FIRST to investigate the kubelet status on that node?

⚠ Common exam trap

Many candidates assume `kubectl describe node` is the first troubleshooting step for a NotReady node, but it only shows the symptom from the control plane's view, not the root cause on the node, which requires direct node access to check the kubelet service.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

systemctl status kubelet

The kubelet is the primary node agent that registers the node with the cluster and reports its status via periodic heartbeats. When a node is NotReady, the first step is to check if the kubelet service is running on that node using `systemctl status kubelet` (or `journalctl -u kubelet`), because a stopped or unhealthy kubelet will directly cause the node to lose connectivity with the control plane. This command is the most direct way to verify the kubelet's process state and recent logs on the node itself.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ssh to the node and run 'docker ps'

    Why it's wrong here

    In modern Kubernetes environments (v1.29+), Docker Engine is typically not the container runtime; containerd is the default Container Runtime Interface (CRI) implementation. Therefore, running 'docker ps' on a node would likely yield an empty list or an error, as no Docker daemon is managing the Kubernetes pods. More importantly, this command only lists containers managed by Docker and provides no insight into the operational status or health of the critical 'kubelet' service itself, which is responsible for node registration and pod lifecycle management.

  • kubectl describe node <node-name>

    Why it's wrong here

    The 'kubectl describe node <node-name>' command provides a high-level overview of the node's resources, events, and conditions reported by the kubelet to the API server. While it can show conditions like 'Ready', 'MemoryPressure', or 'DiskPressure', these are reported states from the kubelet, not direct indicators of whether the kubelet service itself is running, stopped, or encountering startup failures on the host operating system. It doesn't provide access to the kubelet's local service status or its internal logs.

  • kubectl logs kubelet -n kube-system

    Why it's wrong here

    The 'kubelet' is a critical agent that runs directly on each node as a host-level service, typically managed by 'systemd' on Linux distributions. It is not a pod running within the Kubernetes cluster itself, nor is it part of the 'kube-system' namespace. Consequently, attempting to retrieve logs for a "kubelet" pod using 'kubectl logs kubelet -n kube-system' will fail, as no such pod exists for the API server to query. Its logs are managed by the host's logging system.

  • systemctl status kubelet

    Why this is correct

    The 'kubelet' runs as a 'systemd' service on each Kubernetes node, responsible for registering the node with the cluster and managing pods. To diagnose issues where a node is not ready, checking the 'kubelet' service status directly on the node using 'systemctl status kubelet' is the most effective first step. This command provides real-time information about whether the service is active, stopped, or failed, along with recent log entries that often pinpoint the root cause of any operational problems.

About these practice questions

One of 302 original CKA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This CKA practice question is part of Courseiva's free CNCF certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CKA exam.