KCNA Cloud Native Architecture Practice Question
A team wants to manage their Kubernetes infrastructure using code. Which tool is specifically designed for Infrastructure as Code (IaC) and can manage Kubernetes resources?
⚠ Common exam trap
Test-takers frequently confuse Helm or Kustomize as IaC tools because they manage Kubernetes resources declaratively, but they lack the infrastructure provisioning and state management capabilities that define true Infrastructure as Code.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Terraform
Terraform is a dedicated Infrastructure as Code (IaC) tool that uses declarative configuration files (HCL) to provision and manage cloud resources, including Kubernetes clusters and their workloads. It maintains state to track resource dependencies and can orchestrate Kubernetes resources via its Kubernetes provider, making it the correct choice for managing Kubernetes infrastructure as code.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Helm
Why it's wrong here
Helm packages and templates Kubernetes manifests but is a package manager, not an IaC tool reconciling infrastructure state. It is tempting because it manages Kubernetes resources declaratively, yet Terraform is the tool specifically designed for Infrastructure as Code across providers.
- ✗
kubectl
Why it's wrong here
kubectl applies imperative commands and manifests but is not an IaC tool managing declarative state. It is tempting because it does manage Kubernetes resources, yet it lacks the desired-state reconciliation and release lifecycle that IaC tooling provides.
- ✗
Kustomize
Why it's wrong here
Kustomize overlays and patches existing YAML manifests; it does not provision or reconcile infrastructure state, so it cannot create Kubernetes resources from scratch. It is tempting because it manages Kubernetes configuration declaratively, and would be correct for environment-specific customisation of manifests already deployed by another tool.
- ✓
Terraform
Why this is correct
Terraform is a declarative IaC tool with a Kubernetes provider that manages cluster resources as code, tracking state and planning changes. It satisfies the requirement for a purpose-built IaC tool capable of provisioning and managing Kubernetes objects.
Go deeper
Related to this question
About these practice questions
One of 930 original KCNA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on KCNA
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. Which tool is used to manage infrastructure as code and can provision resources across multiple cloud providers?
easy- A.Helm
- ✓ B.Terraform
- C.Ansible
- D.AWS CloudFormation
Why B: Terraform is the correct tool because it is an open-source infrastructure as code (IaC) software tool by HashiCorp that uses declarative configuration files (HCL) to provision and manage resources across multiple cloud providers (AWS, Azure, GCP, etc.) via provider plugins. Unlike single-cloud tools, Terraform's provider architecture allows it to manage heterogeneous environments consistently, making it the standard multi-cloud IaC solution.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This KCNA practice question is part of Courseiva's free CNCF certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the KCNA exam.