Courseiva

CKAD · topic practice

Services and Networking practice questions

Practise Certified Kubernetes Application Developer CKAD Services and Networking practice questions — original exam-style scenarios with answer choices, explanations, and analysis of common mistakes.

Courseiva uses original exam-style practice questions designed for learning and revision. The goal is to understand the concepts, recognise exam patterns, and improve through explanations — not memorise copied exam dumps.

Reviewed byJohnson Ajibi· MSc IT Security
20 questionsDomain: Services and Networking
Practice 10 questionsBrowse domain →

What the exam tests

What to know about Services and Networking

Services and Networking questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Watch out for

Common Services and Networking exam traps

  • ▸Answering from memory before reading the full scenario.
  • ▸Missing a constraint such as cost, availability, security, scope or command context.
  • ▸Choosing a broad answer when the question asks for the most specific fix.
  • ▸Ignoring why the wrong options are tempting.

Practice set

Services and Networking questions

20 questions · select your answer, then reveal the explanation

Question 1mediummultiple choice
Read the full Services and Networking explanation →

A developer deploys a set of Pods labeled app=frontend and wants to expose them internally within the cluster on a stable IP. Which resource should be used?

Question 2hardmultiple choice
Read the full Services and Networking explanation →

A team uses a Service named 'backend' in namespace 'prod' to reach Pods in namespace 'staging'. The Service in 'prod' has no endpoints. What is the most likely cause?

Question 3easymultiple choice
Read the full DNS explanation →

An application requires Pods to communicate using hostNetwork: true. Which Kubernetes resource is still necessary for stable DNS names?

Question 4mediummultiple choice
Read the full Services and Networking explanation →

A Pod needs to access an external database at db.example.com:3306. Which Service type allows Pods to resolve a cluster-local name to this external address?

Question 5hardmultiple choice
Read the full Services and Networking explanation →

A Service of type LoadBalancer is created but the external IP remains <pending>. What is the most likely reason?

Question 6easymultiple choice
Read the full Services and Networking explanation →

A developer wants to expose a set of Pods on a specific port on each node's IP. Which Service type should be used?

Question 7hardmultiple choice
Review the full routing breakdown →

An Ingress resource routes traffic to a Service 'web' on port 80. The Service has multiple endpoints but all return 503. What should be checked first?

Question 8mediummultiple choice
Read the full DNS explanation →

A Pod needs to communicate with another Pod in the same cluster but in a different namespace. What is the correct DNS name to use?

Question 9easymultiple choice
Read the full Services and Networking explanation →

A Service uses a selector to target Pods. After updating the Pod labels, you notice the endpoints list is empty. What is the most likely reason?

Question 10mediummulti select
Read the full Services and Networking explanation →

Which TWO of the following are valid ways to expose a Service externally in a Kubernetes cluster?

Question 11hardmulti select
Read the full Services and Networking explanation →

Which THREE of the following are valid use cases for a Headless Service (clusterIP: None)?

Question 12easymulti select
Review the full routing breakdown →

Which TWO of the following are required for Ingress to route HTTP traffic to a backend Service?

Question 13hardmultiple choice
Read the full Services and Networking explanation →

You are responsible for a multi-tier application running in a Kubernetes cluster. The frontend Pods communicate with backend Pods via a Service named 'backend' in the same namespace. Recently, the frontend team reported that the backend Service is intermittently unreachable. You inspect the backend Pods and notice that they are all running and ready, but the Endpoints object for the 'backend' Service shows only a subset of the Pod IPs. You also notice that the backend Pods have a readiness probe configured that checks an HTTP endpoint '/healthz'. The readiness probe has a periodSeconds of 5 and failureThreshold of 3. The application logs show occasional spikes in response time on the /healthz endpoint, sometimes exceeding 15 seconds. You need to resolve the intermittent unavailability without removing the readiness probe. Which action should you take?

Question 14mediummultiple choice
Read the full DNS explanation →

You have deployed a microservices application in a Kubernetes cluster. One of the services, 'payment-service', needs to be accessed by other services within the cluster via a stable DNS name. You create a Service of type ClusterIP named 'payment' with selector app=payment. However, when you try to curl http://payment from another Pod, the connection times out. You verify that the Pods backing 'payment-service' are running and ready, and the Endpoints object lists the correct Pod IPs. You also confirm that the Pods are listening on port 8080, and the Service defines targetPort: 8080. The cluster uses a standard CNI plugin (Calico) and DNS is provided by CoreDNS. What is the most likely cause of the timeout?

Question 15mediummultiple choice
Read the full DNS explanation →

A company runs a web application in a Kubernetes cluster. The application consists of a frontend service and a backend service. The frontend needs to communicate with the backend using a DNS name that does not change even if the backend pods are recreated. Which Kubernetes resource should the frontend use to reach the backend?

Question 16hardmultiple choice
Read the full Services and Networking explanation →

A DevOps engineer notices that traffic to a Service named 'api' is not being forwarded to newly created pods. The Service selects pods with label 'app: api'. The pods are running and have the correct label. However, the Service's endpoints list does not include the new pods. What is the most likely cause?

Question 17easymultiple choice
Read the full Services and Networking explanation →

A user creates a Deployment with 3 replicas and a Service of type ClusterIP. The Service selects pods with label 'app: web'. The user wants external clients to access the application via a stable IP address. Which additional resource is required?

Question 18hardmultiple choice
Read the full Services and Networking explanation →

During a security audit, it is discovered that a pod running a database is accessible from any other pod in the cluster. The database should only be accessible by pods with label 'role: backend'. Which resource should be applied to enforce this restriction?

Question 19mediummultiple choice
Read the full DNS explanation →

A developer creates a headless Service named 'db' to discover all database pod IPs. The Service selects pods with label 'app: db'. The pods are assigned IPs 10.0.0.1, 10.0.0.2, and 10.0.0.3. When a client performs a DNS lookup for 'db', what will it receive?

Question 20mediummulti select
Read the full Services and Networking explanation →

Which TWO statements about Kubernetes Services are correct? (Choose two.)

Continue with 20-question session →

Free account

Track your progress over time

Create a free account to save your results and see which topics improve across sessions.

Sign up freeLog in

Focused Services and Networking sessions

Start a Services and Networking only practice session

Every question in these sessions is drawn from the Services and Networking domain — nothing else.

10 questions20 questions30 questions50 questions
Browse all Services and Networking questions →Mixed CKAD session

Related practice questions

Related CKAD topic practice pages

Move into related areas when this topic feels solid.

Application Design and Build practice questions

Practise CKAD questions linked to Application Design and Build.

Application Deployment practice questions

Practise CKAD questions linked to Application Deployment.

Application Environment, Configuration and Security practice questions

Practise CKAD questions linked to Application Environment, Configuration and Security.

Application Observability and Maintenance practice questions

Practise CKAD questions linked to Application Observability and Maintenance.

Services and Networking practice questions

Practise CKAD questions linked to Services and Networking.

CKAD fundamentals practice questions

Practise CKAD questions linked to CKAD fundamentals.

CKAD scenario practice questions

Practise CKAD questions linked to CKAD scenario.

CKAD troubleshooting practice questions

Practise CKAD questions linked to CKAD troubleshooting.

Frequently asked questions

What does the CKAD exam test about Services and Networking?
Services and Networking questions test whether you can apply the concept in context, not just recognise a definition.
How should I use these practice questions?
Select your answer before revealing the explanation. Then read why each option is right or wrong — this active recall approach builds retention far faster than re-reading notes.
Can I practise just Services and Networking questions in a focused session?
Yes — the session launcher on this page draws every question from the Services and Networking domain. Use a 10-question session first to gauge your baseline, then move to 20 or 30 once the weak spots are clear.
Where can I practise other CKAD topics?
Use the topic links above to move to related areas, or go back to the CKAD question bank to see all topics.
Are these real exam questions or dumps?
These are original practice questions written to test the same concepts the CKAD exam covers. They are not copied from any real exam or dump site.