CKAD Application Deployment Practice Question
Which THREE of the following are valid Kustomize features? (Select THREE)
⚠ Common exam trap
The exam often tests the distinction between Kubernetes resource kinds (like `serviceAccount` or `ingress`) and Kustomize-specific directives (like `resources`, `patchesStrategicMerge`, or `configMapGenerator`), trapping candidates who confuse the two categories.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
resources
`resources` is a core Kustomize field used to list the YAML files (or directories) that form the base set of Kubernetes resources to be customized. Without `resources`, Kustomize has no manifests to process, making it essential for defining the input to the kustomization build.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
serviceAccount
Why it's wrong here
serviceAccount is not a Kustomize feature or a field within the kustomization.yaml schema; it is a Kubernetes API resource kind (e.g., ServiceAccount objects). Kustomize does not provide a top-level 'serviceAccount' directive—ServiceAccounts are handled through the 'resources' field or as part of a base manifest. Mistaking a resource kind for a Kustomize transformation feature is a common error; Kustomize's own features are limited to generators, transformers, and the resources list, not individual Kubernetes kinds.
- ✓
resources
Why this is correct
The 'resources' field is a foundational Kustomize feature that declares all the YAML manifests (files or directories) to be included in the final rendered output. These resources can be local files, remote URLs, or other kustomization directories, and Kustomize will merge, patch, and transform them according to the other directives in kustomization.yaml. Without 'resources', a kustomization has nothing to process, making it the core entry point for defining what your application consists of.
- ✗
ingress
Why it's wrong here
'ingress' is not a Kustomize feature; it is a Kubernetes API resource type used for routing external traffic to services. In Kustomize, you do not specify an 'ingress' key at the top level—instead, you include Ingress objects via the 'resources' field and optionally modify them using patches or the 'patchesStrategicMerge' feature. Confusing Kustomize's transformation capabilities with the underlying resource kinds is a misunderstanding: Kustomize operates on all resource types generically, not by exposing a dedicated 'ingress' directive.
- ✓
patchesStrategicMerge
Why this is correct
'patchesStrategicMerge' is a Kustomize transformer that applies strategic merge patches to specified resources, allowing you to overlay changes onto existing manifests without rewriting them. This feature is especially useful for customizing base configurations, as it merges arrays and objects according to Kubernetes' strategic merge semantics, which respect patchMergeKey and patchStrategy annotations. It differs from simple JSON patches by supporting a more intuitive, partial-resource YAML syntax that aligns with how Kubernetes handles updates.
- ✓
configMapGenerator
Why this is correct
'configMapGenerator' is a Kustomize generator that creates ConfigMap resources from literal key-value pairs, file contents, or environment files, and automatically suffixes generated ConfigMap names with a content hash to trigger rolling updates when data changes. Unlike manually authoring ConfigMaps in the resources list, this generator integrates with the overlay workflow and enables clean, reproducible configuration injection. The hash suffix ensures that modifications to the generated data are reflected in Deployments that reference the ConfigMap, avoiding stale configurations.
Go deeper
Related to this question
About these practice questions
One of 826 original CKAD practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CKAD practice question is part of Courseiva's free CNCF certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CKAD exam.