Focused practice
Practice Cloud Native Architecture questions
Scored sessions drawing only from this domain — pick a length below.
Start 20-question practice test →What this domain covers
What to know about Cloud Native Architecture
Why learners struggle
Why Cloud Native Architecture questions are commonly missed
NAT questions are missed when learners confuse the four address types (inside local, inside global, outside local, outside global) or misapply the interface direction. A translation rule can look correct but still fail if the ACL, interface, or direction is wrong.
- ·Inside local vs inside global — inside local is the private source, inside global is the translated public address
- ·PAT overloads — many sources share one public IP using unique port numbers
- ·Interface direction — ip nat inside and ip nat outside must be on the correct interfaces
- ·Static NAT vs dynamic NAT vs PAT — each serves a different use case
- ·The NAT ACL identifies traffic to translate, not traffic to permit or deny
- ·A missing translation can look like a routing problem if the interfaces are misconfigured
Watch out for
Common Cloud Native Architecture exam traps
Question index
All Cloud Native Architecture questions (161)
Click any question to see the full explanation, or start a practice session above.
A team wants to manage their Kubernetes infrastructure using code. Which tool is specifically designed for Infrastructure as Code (IaC) and can manage Kubernetes resources?
Medium2In the 12-factor app methodology, which factor describes the practice of storing configuration in environment variables?
Medium3In a service mesh architecture, which component is responsible for intercepting and managing traffic to and from a pod?
Medium4Which component in a service mesh architecture is responsible for handling inter-service communication on behalf of the application container?
Medium5In a service mesh architecture, what is the role of the sidecar proxy?
Medium6Which THREE of the following are key principles of cloud-native architecture according to CNCF?
Hard7Your organization runs a multi-service application on a Kubernetes cluster. Each service is deployed as a set of Pods managed by a Deployment. The application experiences intermittent slowdowns during peak traffic. Monitoring shows that the database service Pods have high CPU usage, but the HorizontalPodAutoscaler (HPA) configured for the database Deployment does not scale. The HPA is based on average CPU utilization across Pods, with target 70%. The database Deployment has resource requests and limits set: requests.cpu: 500m, limits.cpu: 1000m. During peak, CPU usage reaches 800m per Pod. The HPA has a cooldown period of 3 minutes. The cluster has ample capacity. What is the most likely reason the HPA is not scaling?
Medium8Which of the following best describes the purpose of the Cloud Native Computing Foundation (CNCF)?
Easy9In an event-driven architecture, what is the role of an event broker?
Medium10Which THREE of the following are benefits of using a service mesh? (Choose 3.)
Hard11Which component of the Istio service mesh is responsible for certificate signing and identity management?
Medium12A company wants to implement a serverless function that processes events from an object storage bucket. The function should scale to zero when idle and only incur costs during execution. Which technology is BEST suited for this requirement?
Hard13Which component in a service mesh is responsible for handling traffic management, security, and observability as a sidecar proxy?
Medium14A team is migrating a legacy application to Kubernetes. The application requires persistent storage and needs to maintain session affinity. Which set of Kubernetes resources should they use?
Medium15Which of the following is a resiliency pattern that limits the number of concurrent requests to a service to prevent overload?
Hard16Which CNCF project is classified as a 'graduated' project?
Easy17Which THREE are typical characteristics of a cloud-native application?
Hard18You are implementing an API gateway pattern for a set of microservices. Which of the following is a typical responsibility of an API gateway?
Hard19A team is designing a cloud-native system that must maintain high availability across multiple cloud regions. The application uses Kubernetes clusters in each region. Which approach best ensures that the system can tolerate a full region failure while minimizing complexity?
Hard20Which FOUR of the following are CNCF graduated projects? (Choose four.)
Easy21In Istio, which component is responsible for enforcing traffic policies and collecting telemetry data at the pod level?
Hard22In a microservices application, you want to prevent cascading failures by limiting the number of concurrent requests to a downstream service. Which resilience pattern should you implement?
Hard23Match each Kubernetes object to its typical use case.
Medium24Which service mesh component is typically deployed as a sidecar proxy alongside application containers?
Easy25Which service mesh provides built-in support for multi-cluster and multi-cloud deployments?
Medium26What is the primary benefit of using an API gateway in a microservices architecture?
Medium27A company wants to adopt a GitOps workflow for managing their Kubernetes clusters. Which two tools are specifically designed for implementing GitOps on Kubernetes?
Medium28In a multi-cloud scenario, an organization wants to avoid vendor lock-in by abstracting infrastructure provisioning. Which tool is specifically designed to manage infrastructure as code across multiple cloud providers?
Medium29Which CNCF project is a graduated project for service discovery and configuration management?
Easy30Which THREE of the following are components of the GitOps workflow? (Choose three.)
Hard31A team wants to deploy a multi-cloud application that uses cloud-specific services. Which pattern is most appropriate?
Hard32In the context of resiliency patterns, which pattern is designed to prevent a cascade of failures by isolating each component so that a failure in one component does not affect others?
Hard33An application is deployed across multiple cloud providers (AWS and GCP) to avoid vendor lock-in. This is an example of which pattern?
Hard34Which TWO of the following are features of a service mesh like Istio or Linkerd? (Select 2)
Hard35Which of the following patterns is used to improve resilience by isolating failures to a subset of components?
Hard36Which TWO of the following are characteristics of serverless computing?
Hard37An application deployed on Kubernetes is experiencing intermittent failures due to network latency. Which resiliency pattern should be implemented to gracefully handle such failures?
Hard38In GitOps, what is the role of a tool like ArgoCD?
Medium39A cloud-native application is designed with multiple microservices that need to handle a sudden spike in traffic without manual intervention. Which Kubernetes feature best enables this?
Easy40An application requires external configuration that varies between environments (dev, staging, prod). Following the 12-factor app methodology, how should this configuration be provided?
Medium41Which THREE of the following are features provided by a service mesh like Istio? (Select THREE.)
Hard42Which TWO of the following are core principles of cloud native architecture according to the CNCF?
Medium43A development team wants to implement a GitOps workflow for their Kubernetes deployments. Which tool is specifically designed for GitOps on Kubernetes?
Medium44What is the role of an API gateway in a microservices architecture?
Easy45A development team is containerizing a monolithic application into microservices. Which practice aligns with cloud-native architecture principles?
Easy46A cloud-native application experiences periodic timeouts when calling a downstream service. The downstream service is running in the same Kubernetes cluster. Which design pattern should be implemented to handle this gracefully?
Hard47A team is designing a cloud-native application that requires each microservice to have its own database. This pattern is known as:
Medium48Which THREE of the following are core principles of cloud native computing as defined by the CNCF? (Select 3)
Medium49Which TWO are benefits of using a service mesh? (Choose two.)
Medium50Which of the following best describes the purpose of the CNCF (Cloud Native Computing Foundation)?
Easy51A cloud-native application experiences intermittent failures when calling an external API. The team implements a pattern that allows the application to temporarily stop calling the failing API and serve stale data or a fallback response. Which resiliency pattern does this describe?
Hard52Which of the following is a core principle of cloud native architecture as defined by the CNCF?
Easy53Which GitOps tool is specifically designed for Kubernetes and follows the declarative GitOps pattern, continuously reconciling the desired state from a Git repository?
Easy54A development team wants to deploy a serverless function that triggers when a file is uploaded to an S3 bucket. Which cloud native technology is most appropriate for this scenario?
Medium55Which TWO of the following are key characteristics of cloud-native applications? (Select two.)
Medium56Which THREE are core principles of the Twelve-Factor App methodology?
Medium57What is the primary function of a service mesh like Istio?
Medium58An organization wants to adopt a cloud-native approach for its new application. Which characteristic is most important for the application to be considered cloud-native?
Easy59Which THREE of the following are benefits of using an event-driven architecture? (Choose three.)
Hard60Which of the following is a key principle of the 12-factor app methodology?
Medium61Which of the following is a benefit of using an API gateway pattern?
Hard62A cloud-native application uses a service mesh (Istio) for traffic management. The team notices increased latency in inter-service communication. Which likely cause should be investigated first?
Hard63What is the primary purpose of an API gateway in a microservices architecture?
Medium64Which TWO statements are true about cloud-native architecture?
Medium65Which CNCF project is primarily focused on providing a unified way to define and manage cloud-native applications using declarative configuration stored in Git?
Easy66Which TWO practices are recommended for designing cloud-native microservices? (Choose 2)
Hard67Which resource in Kubernetes is used to expose a set of pods as a network service?
Easy68In a serverless architecture using Knative, what happens when a function finishes processing an event and there are no pending events?
Hard69Which GitOps tools use a pull-based approach to synchronize the desired state in a Git repository with the actual state in a Kubernetes cluster? (Select all that apply.)
Medium70A company wants to migrate its monolithic application to a cloud-native architecture on Kubernetes. The application currently uses a shared database and communicates via internal HTTP calls. Which design pattern should be applied first to increase resilience and enable independent scaling of components?
Medium71What is the purpose of the circuit breaker pattern in a microservices architecture?
Medium72The exhibit shows pod status and logs. The web pod lmn34 has restarted 3 times. What is the root cause of the liveness probe failure?
Hard73In serverless computing, what is the primary characteristic of Function-as-a-Service (FaaS)?
Medium74An organization wants to implement a serverless function that scales to zero when not in use. Which technology is specifically designed to achieve this on Kubernetes?
Medium75Which of the following best describes 'Infrastructure as Code' (IaC)?
Medium76Which TWO of the following are CNCF graduated projects? (Select 2)
Medium77A development team wants to adopt a cloud-native architecture for a new application. Which set of principles BEST describes the cloud-native approach?
Medium78Which command would you use to apply a manifest file 'deployment.yaml' to a Kubernetes cluster?
Medium79What is the primary purpose of the CNCF (Cloud Native Computing Foundation)?
Easy80What is the primary purpose of the sidecar container in a service mesh?
Medium81A microservice logs errors when connecting to the database. The logs show 'connection refused'. Which troubleshooting step should be taken first?
Medium82An organization uses GitOps with ArgoCD to manage Kubernetes deployments. What is the PRIMARY advantage of this approach over traditional imperative deployment methods?
Medium83An application experiences intermittent failures when calling an external API. Which resilience pattern should be implemented to handle transient faults?
Hard84Which of the following is a core principle of the 12-factor app methodology?
Easy85Which CNCF project maturity level indicates that a project has adopted the CNCF Code of Conduct and is considered early-stage?
Easy86Which of the following is a key principle of the 12-factor app methodology related to managing configuration?
Hard87What is GitOps?
Easy88Which service mesh component is responsible for handling inter-service communication as a sidecar proxy?
Medium89Your organization runs a cloud-native e-commerce platform on Kubernetes. The platform consists of several microservices: a frontend service, an order service, a payment service, and a shipping service. All services communicate via HTTP REST APIs. Recently, during a flash sale event, the platform experienced a cascading failure. The order service became overwhelmed with requests and started responding slowly. This caused the frontend service to time out waiting for order responses, and eventually the frontend service crashed due to exhausted thread pools. The payment and shipping services were unaffected because they are called asynchronously via a message queue. You need to redesign the system to prevent such cascading failures in the future. Which approach is the most effective?
Hard90In a service mesh architecture, which component is responsible for intercepting and managing traffic between microservices?
Medium91In a multi-cloud architecture, what is a common use case for a service mesh?
Medium92A developer creates the Pod manifest shown. When the Pod runs, the liveness probe fails and the container is restarted repeatedly. What is the most likely cause?
Hard93Which THREE are key benefits of using a service mesh in a cloud-native architecture? (Choose 3)
Medium94Which GitOps tool is a CNCF graduated project that synchronizes Kubernetes clusters with a Git repository?
Hard95Which of the following is a graduated CNCF project?
Medium96In an event-driven architecture using a message broker, which component is responsible for receiving events and forwarding them to subscribed services?
Medium97What is the primary purpose of the CNCF (Cloud Native Computing Foundation)?
Easy98Which of the following is a benefit of using a service mesh?
Medium99According to the 12-factor app methodology, how should an application store configuration that varies between deployments (e.g., database connection strings)?
Medium100What is the purpose of a circuit breaker pattern in microservices?
Easy101Which TWO of the following are core principles of the 12-factor app? (Choose 2.)
Medium102In the context of the 12-factor app methodology, which factor emphasizes storing configuration in environment variables?
Easy103Which CNCF project maturity level indicates that a project has successfully adopted the CNCF governance and is considered stable for production use?
Easy104Which TWO of the following are key principles of cloud native architecture?
Easy105What is the primary purpose of the CNCF (Cloud Native Computing Foundation)?
Easy106Which THREE of the following are benefits of using a service mesh? (Select three.)
Hard107Which TWO of the following are core principles of the 12-factor app methodology? (Select TWO.)
Medium108What is the primary purpose of the CNCF (Cloud Native Computing Foundation)?
Easy109Which component in an event-driven architecture is responsible for decoupling event producers from consumers?
Medium110In a microservices architecture, which pattern is used to prevent cascading failures by limiting the number of concurrent requests to a service?
Medium111Which practice is a key principle of cloud-native architecture?
Easy112Which TWO of the following are essential components of a GitOps workflow? (Select two.)
Easy113Which of the following best describes the purpose of the CNCF (Cloud Native Computing Foundation)?
Medium114In event-driven architecture, which pattern is commonly used to decouple producers and consumers, allowing asynchronous communication?
Hard115Which TWO tools are commonly used for GitOps? (Choose two.)
Medium116Which TWO are benefits of using a service mesh in cloud-native applications?
Hard117Drag and drop the steps to configure a Kubernetes Service of type LoadBalancer in a cloud environment into the correct order.
Medium118Which of the following is an example of Infrastructure as Code (IaC) tool?
Medium119In the context of the 12-factor app methodology, which factor requires that an app's configuration be stored in environment variables?
Hard120What is the primary purpose of the CNCF (Cloud Native Computing Foundation)?
Easy121You are a platform engineer at a fast-growing startup. The company runs a Kubernetes cluster with 50 worker nodes for its production microservices. Recently, the operations team has been struggling with manual configuration drift: developers SSH into nodes to install debugging tools, and some nodes have different kernel parameters or installed packages. This has caused intermittent outages when a pod is scheduled onto a non-standard node. The CTO wants a solution that ensures each node is identical, immutable, and reproducible. The cluster uses kubeadm for bootstrapping and runs on AWS EC2. Which approach best achieves the goal of immutable nodes?
Hard122Which Kubernetes resource is commonly used to implement the sidecar pattern for injecting a service mesh proxy?
Hard123In event-driven architecture, which component is responsible for decoupling event producers from consumers?
Hard124A company wants to manage its Kubernetes resources using Git as the single source of truth, with automated synchronization. Which approach should they use?
Medium125What is the primary purpose of a service mesh in a cloud-native architecture?
Medium126Which TWO of the following are examples of Infrastructure as Code (IaC) tools? (Choose two.)
Easy127Which THREE of the following are resiliency patterns commonly used in cloud native applications? (Choose three.)
Hard128In a serverless architecture using Knative, what happens to a service that has not received traffic for an extended period?
Hard129Which THREE of the following are features typically provided by a service mesh? (Choose three.)
Hard130A team is implementing a multi-cloud strategy to avoid vendor lock-in. Which Kubernetes feature is most helpful for abstracting the underlying cloud provider?
Medium131A retail company runs its e-commerce platform on Kubernetes. During a flash sale, the application experiences high latency. The team notices that the database pods are CPU-bound and the application pods are waiting on database responses. Which architectural change would best address this bottleneck?
Medium132A development team wants to deploy a serverless function that scales to zero when not in use. Which CNCF project or platform is BEST suited for this requirement?
Medium133Which TWO of the following are examples of Infrastructure as Code (IaC) tools? (Choose 2.)
Easy134A team wants to deploy a serverless function using Knative. Which core primitive does Knative rely on to run serverless workloads on Kubernetes?
Medium135A team wants to deploy a serverless function that scales to zero when not in use. Which CNCF project is specifically designed for this purpose?
Medium136Which TWO of the following are principles of the 12-factor app? (Choose two.)
Medium137In event-driven architecture, what is the role of an event broker?
Hard138Which TWO of the following are benefits of using a service mesh? (Choose two.)
Medium139An organization wants to manage infrastructure using code to ensure consistent and repeatable deployments across multiple cloud providers. Which tool is MOST suitable for this multi-cloud Infrastructure as Code approach?
Medium140A development team is designing a new microservices application to run on a Kubernetes cluster. They want to ensure that each microservice can be developed, deployed, and scaled independently. Which cloud native architecture principle are they primarily applying?
Easy141Which THREE are key characteristics of event-driven architecture? (Choose three.)
Hard142The exhibit shows a Deployment manifest for a frontend service. After deployment, the pods are running but the service reports that no endpoints are available. What is the most likely cause?
Medium143Which component of an API gateway pattern is responsible for routing requests to the appropriate microservice based on the request path?
Medium144Which TWO of the following are principles of the 12-factor app methodology? (Choose two.)
Medium145Which of the following is a key difference between a service mesh and an API gateway?
Hard146A developer wants to deploy a function that reacts to image upload events in a cloud storage bucket. The function should scale to zero when idle. Which architecture best fits this use case?
Medium147Which of the following is a benefit of using a service mesh?
Easy148Which of the following best describes the GitOps pattern?
Hard149Which TWO of the following are benefits of using a multi-cloud strategy? (Select TWO.)
Easy150Which tool is used to manage infrastructure as code and can provision resources across multiple cloud providers?
Easy151A company is adopting a multi-cloud strategy to avoid vendor lock-in. Which pattern BEST supports deploying applications across different cloud providers with minimal changes?
Medium152A team wants to deploy a workload that must run on every node in a Kubernetes cluster, including new nodes added later. Which resource type should they use?
Hard153A team is building a serverless application using Knative. They want the application to scale to zero when idle. Which Knative resource type should they use?
Hard154Which of the following is a primary goal of the Cloud Native Computing Foundation (CNCF)?
Easy155Which TWO of the following are core principles of cloud native architecture? (Choose two.)
Medium156Which component in a service mesh is responsible for collecting telemetry data and enforcing traffic policies?
Medium157Which of the following is a core principle of cloud native architecture as defined by the CNCF?
Easy158Which of the following best describes the 12-factor app methodology's approach to configuration?
Medium159Which THREE of the following are benefits of using a service mesh in a cloud native architecture?
Easy160Which TWO of the following are common characteristics of serverless computing? (Choose two.)
Medium161Which of the following best describes the purpose of the CNCF (Cloud Native Computing Foundation)?
EasyOther domains
All KCNA exam domains
Frequently asked questions
- What does the Cloud Native Architecture domain cover on the KCNA exam?
- Cloud concepts questions usually test the service model (IaaS/PaaS/SaaS) and deployment model (public/private/hybrid/community) appropriate for a given scenario.
- How many questions are in this domain?
- This page lists all 161 Cloud Native Architecture questions in the KCNA question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
- What is the best way to practise this domain?
- Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
- Can I practise only Cloud Native Architecture questions?
- Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.