Courseiva

KCNA · domain

Cloud Native Architecture

Practise KCNA NAT and PAT questions covering address translation types, inside/outside interface roles, static vs dynamic vs PAT, and troubleshooting missing or incorrect translations.

161 questions38 easy76 medium47 hard

Focused practice

Practice Cloud Native Architecture questions

Scored sessions drawing only from this domain — pick a length below.

Start 20-question practice test →

What this domain covers

What to know about Cloud Native Architecture

Cloud concepts questions usually test the service model (IaaS/PaaS/SaaS) and deployment model (public/private/hybrid/community) appropriate for a given scenario.

IaaS, PaaS and SaaS responsibilities and examples.

Public, private, hybrid and community cloud deployment models.

On-premises vs cloud trade-offs: cost, control, scalability.

How cloud connectivity options (VPN, Direct Connect, ExpressRoute) work.

Why learners struggle

Why Cloud Native Architecture questions are commonly missed

NAT questions are missed when learners confuse the four address types (inside local, inside global, outside local, outside global) or misapply the interface direction. A translation rule can look correct but still fail if the ACL, interface, or direction is wrong.

  • ·Inside local vs inside global — inside local is the private source, inside global is the translated public address
  • ·PAT overloads — many sources share one public IP using unique port numbers
  • ·Interface direction — ip nat inside and ip nat outside must be on the correct interfaces
  • ·Static NAT vs dynamic NAT vs PAT — each serves a different use case
  • ·The NAT ACL identifies traffic to translate, not traffic to permit or deny
  • ·A missing translation can look like a routing problem if the interfaces are misconfigured

Watch out for

Common Cloud Native Architecture exam traps

  • IaaS gives you infrastructure control; SaaS gives you only the application.
  • Hybrid cloud combines on-premises and public cloud — not two public clouds.
  • Cloud does not automatically mean cheaper or more secure.
  • Management responsibility shifts with each service model (IaaSPaaSSaaS).

Question index

All Cloud Native Architecture questions (161)

Click any question to see the full explanation, or start a practice session above.

1

A team wants to manage their Kubernetes infrastructure using code. Which tool is specifically designed for Infrastructure as Code (IaC) and can manage Kubernetes resources?

Medium
2

In the 12-factor app methodology, which factor describes the practice of storing configuration in environment variables?

Medium
3

In a service mesh architecture, which component is responsible for intercepting and managing traffic to and from a pod?

Medium
4

Which component in a service mesh architecture is responsible for handling inter-service communication on behalf of the application container?

Medium
5

In a service mesh architecture, what is the role of the sidecar proxy?

Medium
6

Which THREE of the following are key principles of cloud-native architecture according to CNCF?

Hard
7

Your organization runs a multi-service application on a Kubernetes cluster. Each service is deployed as a set of Pods managed by a Deployment. The application experiences intermittent slowdowns during peak traffic. Monitoring shows that the database service Pods have high CPU usage, but the HorizontalPodAutoscaler (HPA) configured for the database Deployment does not scale. The HPA is based on average CPU utilization across Pods, with target 70%. The database Deployment has resource requests and limits set: requests.cpu: 500m, limits.cpu: 1000m. During peak, CPU usage reaches 800m per Pod. The HPA has a cooldown period of 3 minutes. The cluster has ample capacity. What is the most likely reason the HPA is not scaling?

Medium
8

Which of the following best describes the purpose of the Cloud Native Computing Foundation (CNCF)?

Easy
9

In an event-driven architecture, what is the role of an event broker?

Medium
10

Which THREE of the following are benefits of using a service mesh? (Choose 3.)

Hard
11

Which component of the Istio service mesh is responsible for certificate signing and identity management?

Medium
12

A company wants to implement a serverless function that processes events from an object storage bucket. The function should scale to zero when idle and only incur costs during execution. Which technology is BEST suited for this requirement?

Hard
13

Which component in a service mesh is responsible for handling traffic management, security, and observability as a sidecar proxy?

Medium
14

A team is migrating a legacy application to Kubernetes. The application requires persistent storage and needs to maintain session affinity. Which set of Kubernetes resources should they use?

Medium
15

Which of the following is a resiliency pattern that limits the number of concurrent requests to a service to prevent overload?

Hard
16

Which CNCF project is classified as a 'graduated' project?

Easy
17

Which THREE are typical characteristics of a cloud-native application?

Hard
18

You are implementing an API gateway pattern for a set of microservices. Which of the following is a typical responsibility of an API gateway?

Hard
19

A team is designing a cloud-native system that must maintain high availability across multiple cloud regions. The application uses Kubernetes clusters in each region. Which approach best ensures that the system can tolerate a full region failure while minimizing complexity?

Hard
20

Which FOUR of the following are CNCF graduated projects? (Choose four.)

Easy
21

In Istio, which component is responsible for enforcing traffic policies and collecting telemetry data at the pod level?

Hard
22

In a microservices application, you want to prevent cascading failures by limiting the number of concurrent requests to a downstream service. Which resilience pattern should you implement?

Hard
23

Match each Kubernetes object to its typical use case.

Medium
24

Which service mesh component is typically deployed as a sidecar proxy alongside application containers?

Easy
25

Which service mesh provides built-in support for multi-cluster and multi-cloud deployments?

Medium
26

What is the primary benefit of using an API gateway in a microservices architecture?

Medium
27

A company wants to adopt a GitOps workflow for managing their Kubernetes clusters. Which two tools are specifically designed for implementing GitOps on Kubernetes?

Medium
28

In a multi-cloud scenario, an organization wants to avoid vendor lock-in by abstracting infrastructure provisioning. Which tool is specifically designed to manage infrastructure as code across multiple cloud providers?

Medium
29

Which CNCF project is a graduated project for service discovery and configuration management?

Easy
30

Which THREE of the following are components of the GitOps workflow? (Choose three.)

Hard
31

A team wants to deploy a multi-cloud application that uses cloud-specific services. Which pattern is most appropriate?

Hard
32

In the context of resiliency patterns, which pattern is designed to prevent a cascade of failures by isolating each component so that a failure in one component does not affect others?

Hard
33

An application is deployed across multiple cloud providers (AWS and GCP) to avoid vendor lock-in. This is an example of which pattern?

Hard
34

Which TWO of the following are features of a service mesh like Istio or Linkerd? (Select 2)

Hard
35

Which of the following patterns is used to improve resilience by isolating failures to a subset of components?

Hard
36

Which TWO of the following are characteristics of serverless computing?

Hard
37

An application deployed on Kubernetes is experiencing intermittent failures due to network latency. Which resiliency pattern should be implemented to gracefully handle such failures?

Hard
38

In GitOps, what is the role of a tool like ArgoCD?

Medium
39

A cloud-native application is designed with multiple microservices that need to handle a sudden spike in traffic without manual intervention. Which Kubernetes feature best enables this?

Easy
40

An application requires external configuration that varies between environments (dev, staging, prod). Following the 12-factor app methodology, how should this configuration be provided?

Medium
41

Which THREE of the following are features provided by a service mesh like Istio? (Select THREE.)

Hard
42

Which TWO of the following are core principles of cloud native architecture according to the CNCF?

Medium
43

A development team wants to implement a GitOps workflow for their Kubernetes deployments. Which tool is specifically designed for GitOps on Kubernetes?

Medium
44

What is the role of an API gateway in a microservices architecture?

Easy
45

A development team is containerizing a monolithic application into microservices. Which practice aligns with cloud-native architecture principles?

Easy
46

A cloud-native application experiences periodic timeouts when calling a downstream service. The downstream service is running in the same Kubernetes cluster. Which design pattern should be implemented to handle this gracefully?

Hard
47

A team is designing a cloud-native application that requires each microservice to have its own database. This pattern is known as:

Medium
48

Which THREE of the following are core principles of cloud native computing as defined by the CNCF? (Select 3)

Medium
49

Which TWO are benefits of using a service mesh? (Choose two.)

Medium
50

Which of the following best describes the purpose of the CNCF (Cloud Native Computing Foundation)?

Easy
51

A cloud-native application experiences intermittent failures when calling an external API. The team implements a pattern that allows the application to temporarily stop calling the failing API and serve stale data or a fallback response. Which resiliency pattern does this describe?

Hard
52

Which of the following is a core principle of cloud native architecture as defined by the CNCF?

Easy
53

Which GitOps tool is specifically designed for Kubernetes and follows the declarative GitOps pattern, continuously reconciling the desired state from a Git repository?

Easy
54

A development team wants to deploy a serverless function that triggers when a file is uploaded to an S3 bucket. Which cloud native technology is most appropriate for this scenario?

Medium
55

Which TWO of the following are key characteristics of cloud-native applications? (Select two.)

Medium
56

Which THREE are core principles of the Twelve-Factor App methodology?

Medium
57

What is the primary function of a service mesh like Istio?

Medium
58

An organization wants to adopt a cloud-native approach for its new application. Which characteristic is most important for the application to be considered cloud-native?

Easy
59

Which THREE of the following are benefits of using an event-driven architecture? (Choose three.)

Hard
60

Which of the following is a key principle of the 12-factor app methodology?

Medium
61

Which of the following is a benefit of using an API gateway pattern?

Hard
62

A cloud-native application uses a service mesh (Istio) for traffic management. The team notices increased latency in inter-service communication. Which likely cause should be investigated first?

Hard
63

What is the primary purpose of an API gateway in a microservices architecture?

Medium
64

Which TWO statements are true about cloud-native architecture?

Medium
65

Which CNCF project is primarily focused on providing a unified way to define and manage cloud-native applications using declarative configuration stored in Git?

Easy
66

Which TWO practices are recommended for designing cloud-native microservices? (Choose 2)

Hard
67

Which resource in Kubernetes is used to expose a set of pods as a network service?

Easy
68

In a serverless architecture using Knative, what happens when a function finishes processing an event and there are no pending events?

Hard
69

Which GitOps tools use a pull-based approach to synchronize the desired state in a Git repository with the actual state in a Kubernetes cluster? (Select all that apply.)

Medium
70

A company wants to migrate its monolithic application to a cloud-native architecture on Kubernetes. The application currently uses a shared database and communicates via internal HTTP calls. Which design pattern should be applied first to increase resilience and enable independent scaling of components?

Medium
71

What is the purpose of the circuit breaker pattern in a microservices architecture?

Medium
72

The exhibit shows pod status and logs. The web pod lmn34 has restarted 3 times. What is the root cause of the liveness probe failure?

Hard
73

In serverless computing, what is the primary characteristic of Function-as-a-Service (FaaS)?

Medium
74

An organization wants to implement a serverless function that scales to zero when not in use. Which technology is specifically designed to achieve this on Kubernetes?

Medium
75

Which of the following best describes 'Infrastructure as Code' (IaC)?

Medium
76

Which TWO of the following are CNCF graduated projects? (Select 2)

Medium
77

A development team wants to adopt a cloud-native architecture for a new application. Which set of principles BEST describes the cloud-native approach?

Medium
78

Which command would you use to apply a manifest file 'deployment.yaml' to a Kubernetes cluster?

Medium
79

What is the primary purpose of the CNCF (Cloud Native Computing Foundation)?

Easy
80

What is the primary purpose of the sidecar container in a service mesh?

Medium
81

A microservice logs errors when connecting to the database. The logs show 'connection refused'. Which troubleshooting step should be taken first?

Medium
82

An organization uses GitOps with ArgoCD to manage Kubernetes deployments. What is the PRIMARY advantage of this approach over traditional imperative deployment methods?

Medium
83

An application experiences intermittent failures when calling an external API. Which resilience pattern should be implemented to handle transient faults?

Hard
84

Which of the following is a core principle of the 12-factor app methodology?

Easy
85

Which CNCF project maturity level indicates that a project has adopted the CNCF Code of Conduct and is considered early-stage?

Easy
86

Which of the following is a key principle of the 12-factor app methodology related to managing configuration?

Hard
87

What is GitOps?

Easy
88

Which service mesh component is responsible for handling inter-service communication as a sidecar proxy?

Medium
89

Your organization runs a cloud-native e-commerce platform on Kubernetes. The platform consists of several microservices: a frontend service, an order service, a payment service, and a shipping service. All services communicate via HTTP REST APIs. Recently, during a flash sale event, the platform experienced a cascading failure. The order service became overwhelmed with requests and started responding slowly. This caused the frontend service to time out waiting for order responses, and eventually the frontend service crashed due to exhausted thread pools. The payment and shipping services were unaffected because they are called asynchronously via a message queue. You need to redesign the system to prevent such cascading failures in the future. Which approach is the most effective?

Hard
90

In a service mesh architecture, which component is responsible for intercepting and managing traffic between microservices?

Medium
91

In a multi-cloud architecture, what is a common use case for a service mesh?

Medium
92

A developer creates the Pod manifest shown. When the Pod runs, the liveness probe fails and the container is restarted repeatedly. What is the most likely cause?

Hard
93

Which THREE are key benefits of using a service mesh in a cloud-native architecture? (Choose 3)

Medium
94

Which GitOps tool is a CNCF graduated project that synchronizes Kubernetes clusters with a Git repository?

Hard
95

Which of the following is a graduated CNCF project?

Medium
96

In an event-driven architecture using a message broker, which component is responsible for receiving events and forwarding them to subscribed services?

Medium
97

What is the primary purpose of the CNCF (Cloud Native Computing Foundation)?

Easy
98

Which of the following is a benefit of using a service mesh?

Medium
99

According to the 12-factor app methodology, how should an application store configuration that varies between deployments (e.g., database connection strings)?

Medium
100

What is the purpose of a circuit breaker pattern in microservices?

Easy
101

Which TWO of the following are core principles of the 12-factor app? (Choose 2.)

Medium
102

In the context of the 12-factor app methodology, which factor emphasizes storing configuration in environment variables?

Easy
103

Which CNCF project maturity level indicates that a project has successfully adopted the CNCF governance and is considered stable for production use?

Easy
104

Which TWO of the following are key principles of cloud native architecture?

Easy
105

What is the primary purpose of the CNCF (Cloud Native Computing Foundation)?

Easy
106

Which THREE of the following are benefits of using a service mesh? (Select three.)

Hard
107

Which TWO of the following are core principles of the 12-factor app methodology? (Select TWO.)

Medium
108

What is the primary purpose of the CNCF (Cloud Native Computing Foundation)?

Easy
109

Which component in an event-driven architecture is responsible for decoupling event producers from consumers?

Medium
110

In a microservices architecture, which pattern is used to prevent cascading failures by limiting the number of concurrent requests to a service?

Medium
111

Which practice is a key principle of cloud-native architecture?

Easy
112

Which TWO of the following are essential components of a GitOps workflow? (Select two.)

Easy
113

Which of the following best describes the purpose of the CNCF (Cloud Native Computing Foundation)?

Medium
114

In event-driven architecture, which pattern is commonly used to decouple producers and consumers, allowing asynchronous communication?

Hard
115

Which TWO tools are commonly used for GitOps? (Choose two.)

Medium
116

Which TWO are benefits of using a service mesh in cloud-native applications?

Hard
117

Drag and drop the steps to configure a Kubernetes Service of type LoadBalancer in a cloud environment into the correct order.

Medium
118

Which of the following is an example of Infrastructure as Code (IaC) tool?

Medium
119

In the context of the 12-factor app methodology, which factor requires that an app's configuration be stored in environment variables?

Hard
120

What is the primary purpose of the CNCF (Cloud Native Computing Foundation)?

Easy
121

You are a platform engineer at a fast-growing startup. The company runs a Kubernetes cluster with 50 worker nodes for its production microservices. Recently, the operations team has been struggling with manual configuration drift: developers SSH into nodes to install debugging tools, and some nodes have different kernel parameters or installed packages. This has caused intermittent outages when a pod is scheduled onto a non-standard node. The CTO wants a solution that ensures each node is identical, immutable, and reproducible. The cluster uses kubeadm for bootstrapping and runs on AWS EC2. Which approach best achieves the goal of immutable nodes?

Hard
122

Which Kubernetes resource is commonly used to implement the sidecar pattern for injecting a service mesh proxy?

Hard
123

In event-driven architecture, which component is responsible for decoupling event producers from consumers?

Hard
124

A company wants to manage its Kubernetes resources using Git as the single source of truth, with automated synchronization. Which approach should they use?

Medium
125

What is the primary purpose of a service mesh in a cloud-native architecture?

Medium
126

Which TWO of the following are examples of Infrastructure as Code (IaC) tools? (Choose two.)

Easy
127

Which THREE of the following are resiliency patterns commonly used in cloud native applications? (Choose three.)

Hard
128

In a serverless architecture using Knative, what happens to a service that has not received traffic for an extended period?

Hard
129

Which THREE of the following are features typically provided by a service mesh? (Choose three.)

Hard
130

A team is implementing a multi-cloud strategy to avoid vendor lock-in. Which Kubernetes feature is most helpful for abstracting the underlying cloud provider?

Medium
131

A retail company runs its e-commerce platform on Kubernetes. During a flash sale, the application experiences high latency. The team notices that the database pods are CPU-bound and the application pods are waiting on database responses. Which architectural change would best address this bottleneck?

Medium
132

A development team wants to deploy a serverless function that scales to zero when not in use. Which CNCF project or platform is BEST suited for this requirement?

Medium
133

Which TWO of the following are examples of Infrastructure as Code (IaC) tools? (Choose 2.)

Easy
134

A team wants to deploy a serverless function using Knative. Which core primitive does Knative rely on to run serverless workloads on Kubernetes?

Medium
135

A team wants to deploy a serverless function that scales to zero when not in use. Which CNCF project is specifically designed for this purpose?

Medium
136

Which TWO of the following are principles of the 12-factor app? (Choose two.)

Medium
137

In event-driven architecture, what is the role of an event broker?

Hard
138

Which TWO of the following are benefits of using a service mesh? (Choose two.)

Medium
139

An organization wants to manage infrastructure using code to ensure consistent and repeatable deployments across multiple cloud providers. Which tool is MOST suitable for this multi-cloud Infrastructure as Code approach?

Medium
140

A development team is designing a new microservices application to run on a Kubernetes cluster. They want to ensure that each microservice can be developed, deployed, and scaled independently. Which cloud native architecture principle are they primarily applying?

Easy
141

Which THREE are key characteristics of event-driven architecture? (Choose three.)

Hard
142

The exhibit shows a Deployment manifest for a frontend service. After deployment, the pods are running but the service reports that no endpoints are available. What is the most likely cause?

Medium
143

Which component of an API gateway pattern is responsible for routing requests to the appropriate microservice based on the request path?

Medium
144

Which TWO of the following are principles of the 12-factor app methodology? (Choose two.)

Medium
145

Which of the following is a key difference between a service mesh and an API gateway?

Hard
146

A developer wants to deploy a function that reacts to image upload events in a cloud storage bucket. The function should scale to zero when idle. Which architecture best fits this use case?

Medium
147

Which of the following is a benefit of using a service mesh?

Easy
148

Which of the following best describes the GitOps pattern?

Hard
149

Which TWO of the following are benefits of using a multi-cloud strategy? (Select TWO.)

Easy
150

Which tool is used to manage infrastructure as code and can provision resources across multiple cloud providers?

Easy
151

A company is adopting a multi-cloud strategy to avoid vendor lock-in. Which pattern BEST supports deploying applications across different cloud providers with minimal changes?

Medium
152

A team wants to deploy a workload that must run on every node in a Kubernetes cluster, including new nodes added later. Which resource type should they use?

Hard
153

A team is building a serverless application using Knative. They want the application to scale to zero when idle. Which Knative resource type should they use?

Hard
154

Which of the following is a primary goal of the Cloud Native Computing Foundation (CNCF)?

Easy
155

Which TWO of the following are core principles of cloud native architecture? (Choose two.)

Medium
156

Which component in a service mesh is responsible for collecting telemetry data and enforcing traffic policies?

Medium
157

Which of the following is a core principle of cloud native architecture as defined by the CNCF?

Easy
158

Which of the following best describes the 12-factor app methodology's approach to configuration?

Medium
159

Which THREE of the following are benefits of using a service mesh in a cloud native architecture?

Easy
160

Which TWO of the following are common characteristics of serverless computing? (Choose two.)

Medium
161

Which of the following best describes the purpose of the CNCF (Cloud Native Computing Foundation)?

Easy

Frequently asked questions

What does the Cloud Native Architecture domain cover on the KCNA exam?
Cloud concepts questions usually test the service model (IaaS/PaaS/SaaS) and deployment model (public/private/hybrid/community) appropriate for a given scenario.
How many questions are in this domain?
This page lists all 161 Cloud Native Architecture questions in the KCNA question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
What is the best way to practise this domain?
Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
Can I practise only Cloud Native Architecture questions?
Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.
cncf-kcna CNCF-KCNA kcna cloud native arch Practice Questions