scenario questions

You have a ConfigMap named 'app-config' with key 'database.url'. Which environment variable reference in a Pod spec injects this value correctly?

A team wants to manage their Kubernetes infrastructure using code. Which tool is specifically designed for Infrastructure as Code (IaC) and can manage Kubernetes resources?

Which three of the following are true about Services in Kubernetes? (Select three.)

Which component on each worker node is responsible for ensuring that containers are running as specified in the Pod manifest?

In the 12-factor app methodology, which factor describes the practice of storing configuration in environment variables?

A security team wants to audit which users performed privileged actions in a Kubernetes cluster. They need a record of API requests, including the user, verb, resource, and response status. Which Kubernetes feature should they enable?

In a service mesh architecture, which component is responsible for intercepting and managing traffic to and from a pod?

When using OpenTelemetry, what is the role of the 'Collector'?

Which command is used to rollback a Helm release to a previous revision?

An SRE team is reviewing a stateless web tier that runs as a Deployment. They want the platform to automatically add replicas when average CPU utilization across the Pods rises above a target, and to remove replicas when load drops, without any manual intervention. Which Kubernetes resource should they configure?

Which component runs on every node and is responsible for ensuring that containers are running as specified in Pod manifests?

A pod is stuck in Pending state. Which THREE of the following are possible causes?

Which of the following is a key benefit of container orchestration compared to running containers manually?

You need to run a stateless web application with three replicas, and you want to ensure that if a pod fails, it is automatically replaced. Which Kubernetes resource should you use?

Which THREE are valid container runtimes that implement the Kubernetes CRI? (Choose three.)

Which TWO of the following are valid PromQL functions? (Select two.)

In the context of the 12-factor app methodology, which factor is addressed by storing configuration in environment variables?

A user wants to check the resource usage of Pods in a cluster. Which command should be used to display CPU and memory usage for all Pods in the default namespace?

Which component in a service mesh architecture is responsible for handling inter-service communication on behalf of the application container?

Which kubectl command would you use to view the logs of a specific container named 'app' in a multi-container Pod named 'web-pod'?

What is the role of the kubelet on a worker node?

In a service mesh architecture, what is the role of the sidecar proxy?

A site reliability engineer is investigating high latency in a microservices application. They have distributed traces but need to understand how a single trace spans multiple services and where time is spent. Which OpenTelemetry concept allows correlating spans across service boundaries into a single trace?

Which Prometheus metric type is used to represent a value that can increase or decrease over time, such as memory usage?

Which THREE of the following are components of the OpenTelemetry project?

In the context of DORA metrics, which metric measures how often an organization successfully releases to production?

Which Kubernetes object provides stable network endpoints and load balancing for a set of Pods?

During a canary deployment using Argo Rollouts, how does the tool determine the success of the canary before promoting it?

Which TWO of the following are benefits of using containers over virtual machines? (Choose 2)

Which of the following best describes the purpose of the Cloud Native Computing Foundation (CNCF)?

Which command would you use to view the logs of a container named 'web' in a pod named 'frontend' running in the 'production' namespace?

Which TWO of the following are valid ways to expose a Deployment as a Service?

In an event-driven architecture, what is the role of an event broker?

What is the main advantage of using OpenTelemetry over vendor-specific instrumentation libraries?

Which THREE of the following are benefits of using a service mesh? (Choose 3.)

A Kubernetes cluster is experiencing network latency. The team suspects that the number of services and endpoints is causing iptables performance degradation. Which CNI plugin or network policy approach is most likely to improve performance?

A platform engineer is troubleshooting a Pod stuck in the Pending state and wants to identify scheduling-related causes. Which two commands or outputs are most useful for diagnosing why the scheduler cannot place the Pod? (Choose two.)

You have a Pod that needs to run a one-time batch job to completion. Which resource type should you use?

Which THREE of the following are features of Helm that facilitate release management? (Choose three.)

Which Prometheus metric type is best suited for counting the total number of HTTP requests received by a service?

Which of the following is a worker node component responsible for ensuring that containers are running in a pod as specified in the pod's spec?

An organization uses Flux with Kustomize to manage their Kubernetes applications. They want to automatically update their deployment when a new container image is pushed to the registry. Which Flux component should they use?

You need to run a batch job that processes a queue and then terminates. Which Kubernetes resource should you use?

Which component of the Istio service mesh is responsible for certificate signing and identity management?

Which component on a worker node is responsible for enforcing the network rules and implementing Service abstractions?

You are designing a microservices application. Which of the following is a key principle of microservices architecture?

You have a Deployment named 'web-app' that manages 3 replicas. You need to update the container image from version 1.0 to 2.0 with zero downtime. Which Kubernetes feature is designed to handle this automatically when you update the Deployment's pod template?

What is the smallest deployable unit in Kubernetes?

A team runs a stateless web application and wants to update its container image with zero downtime while gradually shifting traffic to the new version. They also need the ability to pause the rollout, inspect the new Pods, and then resume. Which Kubernetes workload and strategy best supports this workflow?

A Deployment manages ReplicaSets and supports rolling updates. You want to change the container image of a Deployment without downtime. What is the recommended approach?

Which THREE of the following are valid options for the 'kubectl get' command to display output in different formats?

Which three of the following are valid ways to expose a service externally in Kubernetes? (Select THREE.)

A cluster has a node with the taint 'node-role.kubernetes.io/control-plane:NoSchedule'. A pod must be scheduled on this node for a special workload. Which action is required?

Which component in a service mesh is responsible for handling traffic management, security, and observability as a sidecar proxy?

A developer wants to run a container image locally for testing before deploying to a Kubernetes cluster. Which tool is most appropriate for this task?

An administrator needs to grant a ServiceAccount in namespace 'dev' permission to list and watch Pods in the same namespace. Which combination of resources is required?

A platform engineer is preparing a new cluster and wants each worker node to run a copy of a log-forwarding agent that must also run on control-plane nodes. Which Kubernetes workload resource should be used?

You have a Deployment that runs a web application. You need to expose this application externally on a fixed port using a cloud load balancer. Which Service type should you use?

Which component runs on every node and is responsible for maintaining network rules that allow communication to Pods from network endpoints?

You want to view the logs of a running pod named 'my-pod'. Which kubectl command should you use?

What is the purpose of kube-proxy on a worker node?

What is the purpose of the metrics-server in Kubernetes?

Which Kubernetes resource provides stable network endpoints for a set of pods, enabling service discovery and load balancing?

A Pod has been in 'Pending' state for an unusual amount of time. Which of the following is a likely cause?

Which resource type provides a stable IP address and DNS name to access a set of Pods, regardless of Pod IP changes?

A user runs 'kubectl get pods -n production' and sees no output. What is the most likely reason?

A team is designing a cloud-native application and wants to ensure that the failure of a single availability zone does not cause a full outage. They deploy the application across multiple zones and configure the orchestrator to distribute replicas evenly. Which cloud-native architecture principle does this scenario primarily demonstrate?

You have a Pod with a container that runs a web server. The Pod has a memory request of 256Mi and a memory limit of 512Mi. The container attempts to allocate 600Mi of memory. What happens?

Which THREE of the following are valid fields in a Kubernetes Deployment spec (apps/v1)?

You want to expose a set of pods running a web application on port 80 internally within the cluster, with a stable IP address, so that other services can reach them. Which Kubernetes resource should you create?

Drag and drop the steps to scale a Kubernetes Deployment horizontally into the correct order.

Which TWO of the following are valid Prometheus metric types?

Which kubectl command would you use to view detailed information about a specific pod, including events and container status?

A Service of type ClusterIP has been created, but pods in the same namespace cannot reach it by its DNS name. The Service selector matches the pods. What is a likely cause?

You need to run a one-time batch job that processes data and then exits. The job should run to completion and not be restarted. Which Kubernetes resource should you use?

In OpenTelemetry, which component is responsible for receiving, processing, and exporting telemetry data from multiple sources?

A developer runs `kubectl apply -f pod.yaml` against a cluster running Kubernetes v1.29. The Pod manifest sets `spec.restartPolicy: Always` and `spec.containers[0].name: app`. The Pod starts successfully but the developer wants to change the container image from `nginx:1.24` to `nginx:1.25`. They edit the YAML file and re-run `kubectl apply -f pod.yaml`. What is the result?

In Prometheus, what is the purpose of the Alertmanager component?

Which three components are part of the Kubernetes control plane?

Which TWO of the following are benefits of container orchestration?

A developer wants to run a containerized application locally for development. Which tool is most appropriate?

Which CNCF project is classified as a 'graduated' project?

An application requires stable network identities and persistent storage. Which workload type should be used?

A CI pipeline builds a container image and tags it only as latest before pushing to a registry. A release engineer needs to deploy a specific, immutable version and be able to roll back to a known good build. What is the best practice to adopt?

Which component of the Kubernetes control plane is responsible for persisting the cluster state?

Which THREE are typical characteristics of a cloud-native application?

You are implementing an API gateway pattern for a set of microservices. Which of the following is a typical responsibility of an API gateway?

Which of the following is a benefit of using an orchestrator like Kubernetes?

Which TWO of the following components are part of the Kubernetes control plane? (Select 2)

Drag and drop the steps to perform a backup of etcd in a Kubernetes cluster into the correct order.

A Kubernetes cluster runs a critical application that must be highly available. The application consists of three pods managed by a Deployment. To ensure the application remains accessible during a node failure, which configuration should be applied?

A team is designing a cloud-native system that must maintain high availability across multiple cloud regions. The application uses Kubernetes clusters in each region. Which approach best ensures that the system can tolerate a full region failure while minimizing complexity?

An administrator runs `kubectl get pods -n finance` and sees a Pod named `report-0` that is Running but not Ready. The Pod's container has a readiness probe configured with `httpGet` on path `/healthz` port 8080. Logs show the application is running and serving requests on port 8080. Which condition most likely explains why the Pod is Running but not Ready?

A pod is in the 'CrashLoopBackOff' state. You run 'kubectl logs mypod' and see an error related to missing environment variables. The pod is part of a Deployment. What is the best way to fix this without recreating the entire Deployment?

A developer creates a Pod with a container that writes data to /var/log/app.log inside the container. The Pod is deleted and recreated, and the log file is gone. Which Kubernetes volume type would preserve the log file across Pod restarts on the same node?

A team is deploying a microservice application on Kubernetes. They want to ensure that during rolling updates, the new version of the service receives traffic only after the readiness probe succeeds. However, they observe that the old pods are terminated before the new pods are ready, causing a brief downtime. Which configuration change should they make to the Deployment to prevent this?

A developer needs a Pod to read configuration values and credentials separately, where non-sensitive settings should update without restarting the Pod and secrets should be mounted as files. Which pairing of Kubernetes objects best fits this requirement?

Which two of the following are container runtimes that implement the Container Runtime Interface (CRI)? (Choose two.)

You have a Deployment that manages 3 replicas. You want to perform a rolling update with a maximum of 2 Pods unavailable during the update. Which field should you set in the Deployment spec?

You have a Pod with a container that needs to read sensitive data such as a database password. Which Kubernetes resource should you use to store this data?

Which of the following is a benefit of using container orchestration platforms like Kubernetes?

In Istio, which component is responsible for enforcing traffic policies and collecting telemetry data at the pod level?

Which TWO of the following are benefits of using a container orchestration platform like Kubernetes? (Select 2)

Which TWO of the following are valid Kubernetes resource types that can be used to store configuration data or secrets?

An administrator runs 'kubectl get pods' and sees that a pod named 'app-pod' is in 'CrashLoopBackOff'. They run 'kubectl logs app-pod' and see a segmentation fault error. What is the most likely cause?

Which TWO statements about GitOps are correct?

In a microservices application, you want to prevent cascading failures by limiting the number of concurrent requests to a downstream service. Which resilience pattern should you implement?

An administrator manages a cluster where a Namespace named 'analytics' contains a ResourceQuota that limits pods to 10. A developer applies a manifest containing a ReplicaSet with replicas: 12 in that Namespace. The ReplicaSet controller creates the first 10 Pods successfully, but the remaining 2 Pods are rejected. Which statement best describes what the developer will observe and why?

Match each Kubernetes object to its typical use case.

Which deployment strategy updates pods incrementally, replacing old pods with new ones while ensuring availability?

Which TWO of the following are valid ways to view the logs of a pod named 'my-pod'?

You have a Deployment with three replicas. You want to update the container image but ensure that only one pod is updated at a time, and the update proceeds only if the new pod becomes healthy. Which update strategy should you configure?

Which THREE of the following are valid ways to create a Kubernetes resource using kubectl?

A DevOps engineer has created a ConfigMap named 'app-config' and wants to use it to set environment variables in a pod. Which field in the pod spec should reference the ConfigMap?

Which service mesh component is typically deployed as a sidecar proxy alongside application containers?

An administrator wants to update the image of a Deployment named 'my-app' from 'nginx:1.19' to 'nginx:1.20' with a rolling update strategy. They want to ensure that during the update, the number of unavailable pods never exceeds 1. Which field should they set in the Deployment spec?

What is the primary purpose of a continuous integration (CI) pipeline in cloud native application delivery?

A Deployment is configured with 'replicas: 5' and a rolling update strategy. During an update, you notice that the number of available pods drops to 3 momentarily. Which field in the Deployment spec can be adjusted to control the minimum number of pods available during a rolling update?

You need to deploy a batch job that processes a queue and runs to completion. The job should run exactly once and create exactly one pod per work item, but some items may fail. Which Kubernetes resource is best suited?

A company wants to adopt immutable infrastructure for its containerized applications. Which practice BEST exemplifies immutability?

A company is adopting cloud-native architecture and wants to improve the resilience of its applications. Which TWO of the following are core principles of cloud-native architecture that directly contribute to resilience? (Choose two.)

Which Kubernetes component is responsible for ensuring that the desired number of pod replicas is running in the cluster?

Which Kubernetes object can be used to store sensitive data, such as passwords or API keys, and inject them into pods?

A Deployment is configured with 'replicas: 3'. After a node failure, only 2 pods are running. What component ensures that a new pod is scheduled to restore the desired replica count?

A user reports that they cannot connect to a database service named 'db-service' from another pod in the same namespace. The service selector matches the database pod's labels. Which command would you run FIRST to troubleshoot the service's endpoints?

You need to inspect the logs of a container named 'app' in a pod called 'web-1'. Which kubectl command should you use?

A platform engineer runs `kubectl get pods -n web` and sees a pod stuck in the `Pending` phase. The pod's `nodeName` field is empty, and no events about image pulling appear. Which Kubernetes component is most directly responsible for assigning this pod to a node?

Which of the following is a core component of the three pillars of observability?

You have a Deployment running 3 replicas. You need to update the container image without downtime. Which command updates the image while performing a rolling update?

Which component is the primary entry point for all administrative tasks and API requests in a Kubernetes control plane?

You create a Deployment with 'replicas: 3' and update the pod template to use a new image. After the rollout, you notice that the new ReplicaSet has 3 pods but they are all failing with 'CrashLoopBackOff'. You want to rollback to the previous working revision. Which command should you run?

You have a Deployment with image: myapp:v1. You update the image to myapp:v2 using 'kubectl set image deployment/myapp myapp=myapp:v2'. The rollout status shows 'Waiting for rollout to finish: 0 out of 3 new replicas have been updated...'. What is the most likely cause of this behavior?

Which three of the following are valid methods to expose a Service to external traffic? (Select THREE)

Which Prometheus metric type is best suited to count the number of HTTP requests received?

A Deployment named 'myapp' is managing a ReplicaSet. You need to update the application image to version 2.0. What is the recommended approach?

A team wants to use feature flags to control the rollout of a new feature in a Kubernetes-deployed microservice. Which tool is specifically designed for managing feature flags in cloud-native applications?

What is the primary benefit of using an API gateway in a microservices architecture?

A cluster administrator wants to allow a Pod to access the Kubernetes API to list Pods in its own namespace. Which authentication and authorization mechanism should be used to grant the Pod the necessary permissions?

A team uses Helm to manage their Kubernetes applications. They need to upgrade a release and want to reuse the values from the previous release while overriding a specific value. Which helm command should they use?

A company wants to adopt a GitOps workflow for managing their Kubernetes clusters. Which two tools are specifically designed for implementing GitOps on Kubernetes?

A Kubernetes cluster runs a critical application that must be updated with zero downtime. The team wants to gradually shift traffic from the old version to the new version over a period of time. Which deployment pattern is MOST appropriate?

Which of the following is NOT one of the three pillars of observability?

In a multi-cloud scenario, an organization wants to avoid vendor lock-in by abstracting infrastructure provisioning. Which tool is specifically designed to manage infrastructure as code across multiple cloud providers?

Which THREE statements about Kubernetes Pods are correct?

Which of the following is a benefit of container orchestration?

Which field in a Pod's container specification defines the minimum amount of CPU guaranteed to the container?

Which TWO of the following are capabilities of ArgoCD? (Choose two.)

Which component in Kubernetes is responsible for managing the lifecycle of pods and ensuring the desired number of replicas are running?

Which THREE of the following are valid ways to expose a set of pods as a network service in Kubernetes?

Which THREE of the following are components of the GitOps workflow? (Choose three.)

Which Helm command is used to upgrade a release to a newer version of a chart?

In a Helm chart, which file is used to define default configuration values that can be overridden by users during installation?

A team wants to deploy a multi-cloud application that uses cloud-specific services. Which pattern is most appropriate?

Which kubectl command is used to create or update resources defined in a YAML file?

Which two of the following are valid ways to expose a set of Pods to external traffic?

In the context of resiliency patterns, which pattern is designed to prevent a cascade of failures by isolating each component so that a failure in one component does not affect others?

A pod uses a ServiceAccount that has a RoleBinding to a Role with 'get', 'list', 'watch' on 'pods'. The pod tries to list pods in the same namespace. Will the request succeed?

Which TWO statements are true about Kustomize? (Choose 2)

What is the primary purpose of a container registry in the CI/CD pipeline?

An application is instrumented with OpenTelemetry to export traces to Jaeger. The team notices that some traces are incomplete. What is the most likely cause?

A user wants to run a one-time batch job that runs to completion. Which Kubernetes resource should they use?

Which TWO components are part of the Kubernetes control plane? (Select exactly two.)

A team wants to run a database Pod that must be scheduled onto a node with an SSD and must not be evicted when the node comes under memory pressure. Which combination of fields should be configured in the Pod spec?

An application is deployed across multiple cloud providers (AWS and GCP) to avoid vendor lock-in. This is an example of which pattern?

A Service of type ClusterIP is created. What is the default behavior of this Service?

What type of Prometheus metric is best suited to count the total number of HTTP requests received by a service?

Which tool is specifically designed for log aggregation and is built by Grafana Labs as a lightweight, cost-effective alternative to traditional log systems?

A workload running in a namespace called 'payments' is defined by a Pod spec with restartPolicy: Always. The cluster's kubelet on node 'worker-3' is healthy, the API server is reachable, and the scheduler has placed the Pod on worker-3. After the Pod's only container exits with code 0, a platform engineer observes that the Pod restarts repeatedly even though the application completed its work successfully. Which Kubernetes behavior explains this observation?

Which field in a Deployment YAML specifies the number of pod replicas?

Which TWO of the following are Prometheus metric types? (Select two.)

A developer is troubleshooting a Pod that is stuck in the Pending state. Which two commands can help identify the reason for the scheduling failure? (Choose two.)

Which TWO of the following are features of a service mesh like Istio or Linkerd? (Select 2)

What is the purpose of values.yaml in a Helm chart?

In Kustomize, what is the purpose of an overlay?

A DevOps team wants to implement GitOps for their Kubernetes cluster. Which tool is specifically designed for Kubernetes GitOps and can automatically sync the cluster state with a Git repository?

A site reliability engineer is investigating high latency in a microservices application. They have distributed tracing enabled with OpenTelemetry and traces exported to a backend. They want to correlate a specific slow trace with the logs generated by the involved services. Which practice best enables this correlation?

Which two of the following are benefits of using Kubernetes for container orchestration? (Select TWO.)

An operator needs a workload that runs exactly one Pod on every node in the cluster, including nodes added later, to collect host-level logs. Which Kubernetes resource should be used?

Which of the following patterns is used to improve resilience by isolating failures to a subset of components?

Which TWO statements about container images are correct? (Choose two.)

A pod spec includes a liveness probe that runs 'cat /tmp/healthy'. The probe is configured with initialDelaySeconds: 10, periodSeconds: 5. At what point does the kubelet first execute the probe?

A developer wants to inject environment variables into a pod from a ConfigMap named 'app-config'. Which YAML snippet correctly mounts all key-value pairs from the ConfigMap as environment variables?

Which of the following is considered one of the three pillars of observability?

A DevOps team notices that a new deployment of a web application is not receiving traffic even though the pods are running. The deployment has a selector matching the pod labels, and a Service of type ClusterIP exists. What is the most likely cause?

A developer wants to run a one-time batch job that processes a queue and then terminates. Which Kubernetes resource should they use?

A Kubernetes cluster has a single control plane node and two worker nodes. The control plane node fails. What is the immediate impact on the workloads running on the worker nodes?

Which TWO resources can be used to store configuration data separately from container images?

A developer instruments a service using the OpenTelemetry SDK and wants to export traces to a backend. The backend expects data in the OTLP format. Which OpenTelemetry component is responsible for receiving, processing, and exporting telemetry data to the backend?

Which Kubernetes command displays the current state of a pod, including its IP address, node, and container statuses?

Refer to the exhibit. A pod 'my-pod' shows repeated 'BackOff' events after the container starts. Which is the most likely cause?

Which of the following is a correct YAML structure for a Service of type ClusterIP?

Which log aggregation tool is designed specifically for Kubernetes and is often used as a lightweight alternative to Fluentd?

A developer wants to deploy a stateless web application that should maintain three running instances at all times. Which Kubernetes resource should they use?

You create a Pod with a liveness probe that uses an HTTP GET on port 8080, path /healthz. The probe fails after the container starts. What will happen to the Pod?

You have a Deployment that manages 3 replicas of a web application. You want to perform a rolling update with zero downtime. Which kubectl command should you use?

Refer to the exhibit. How many containers are defined in this Pod?

Which TWO of the following are characteristics of serverless computing?

Which TWO of the following are benefits of using Helm for application delivery?

A pod is stuck in 'Pending' state. You run 'kubectl describe pod mypod' and see the event '0/4 nodes are available: 4 Insufficient cpu'. What is the most likely cause?

When using a Service of type ClusterIP, how do pods reach the service?

A Deployment is created with `replicas: 3`. After applying the manifest, only 2 pods are running and one is in Pending state. What is the most likely reason?

Which component on a worker node is responsible for enforcing the desired state of pods as defined in the pod specification?

A pod is stuck in 'Pending' state. Which of the following is NOT a common cause for a pod to remain Pending?

Which THREE are valid ways to provide configuration data to a pod in Kubernetes?

Which Kubernetes primitive is the smallest and simplest unit in the Kubernetes object model that you can create or deploy?

A team is evaluating whether their application qualifies as cloud-native. They want to identify characteristics that are central to cloud-native architecture rather than incidental implementation details. Which TWO of the following are core characteristics of cloud-native architecture? (Choose two.)

What is the primary purpose of Prometheus in cloud native observability?

Which THREE of the following are true about container lifecycle? (Choose 3)

Which TWO of the following are characteristics of Kustomize?

You are asked to deploy a Kubernetes service that exposes a set of pods internally within the cluster only. The service should not be accessible from outside the cluster. Which Service type should you choose?

What is the primary purpose of the Open Container Initiative (OCI)?

Which control plane component is responsible for assigning pods to nodes?

An SRE team defines an SLO that 99.9% of requests to a service should complete in under 500ms over a 30-day rolling window. If the service receives 10 million requests in a month, what is the maximum number of requests that can exceed the latency threshold while still meeting the SLO?

Which THREE of the following are valid use cases for Kubernetes Namespaces? (Select 3)

You have two pods in different namespaces that need to communicate using a stable IP address. Which Kubernetes object provides a stable endpoint for a set of pods?

You need to run a stateful application that requires stable network identities and persistent storage per pod. Which Kubernetes resource is BEST suited?

Which THREE are examples of DORA metrics used to measure DevOps performance? (Choose 3)

Which two of the following are characteristics of container images built using OCI standards? (Choose two.)

A team is implementing observability for a cloud native application. They want to adopt OpenTelemetry to instrument their code and collect telemetry data. Which TWO of the following are core components of the OpenTelemetry project? (Choose two.)

A platform team uses Argo CD to manage a Kubernetes cluster. A developer manually edits a Deployment's replica count from 3 to 5 using kubectl, bypassing Git. Argo CD detects the drift and its sync policy is set to automated with self-heal enabled. What happens next?

You are deploying a stateful application that requires each pod to have a stable, unique network identity and its own persistent storage. Which Kubernetes resource should you use?

A Kubernetes cluster has two nodes: control-plane and worker. The worker node runs several pods. The control-plane node becomes unreachable. What is the immediate impact on the pods running on the worker node?

You have a Pod that is in 'Pending' state. What is the most likely cause?

Which of the following is a key benefit of container orchestration?

A service of type ClusterIP is created but pods cannot reach it using the service name. The pods are in the same namespace. What is a likely cause?

What is the primary purpose of a container orchestration platform like Kubernetes?

A platform team wants to implement observability for a Kubernetes cluster running 500+ microservices. They need to reduce the cost of storing logs while retaining the ability to search for specific error patterns. Which strategy best achieves this?

Which component is the primary entry point for all administrative tasks and API requests in a Kubernetes cluster?

Which THREE of the following are key benefits of container orchestration? (Choose 3)

You have a ConfigMap named 'app-config' and a Secret named 'db-password'. You want to mount them into a pod. Which statement is correct?

A cluster administrator wants to ensure that a specific Pod always runs on a node with an SSD. The node has the label disktype=ssd. Which Kubernetes feature should the administrator use?

In GitOps, what is the role of a tool like ArgoCD?

A cluster administrator needs to ensure that a Deployment named 'frontend' in namespace 'web' is updated with a new image version using a rolling update strategy. The current deployment has 4 replicas. The administrator runs: kubectl set image deployment/frontend frontend=nginx:1.21 -n web. Which of the following describes the expected behavior?

What is the primary benefit of using containers over virtual machines?

What is the primary difference between a container and a virtual machine (VM)?

A cloud-native application is designed with multiple microservices that need to handle a sudden spike in traffic without manual intervention. Which Kubernetes feature best enables this?

An application requires external configuration that varies between environments (dev, staging, prod). Following the 12-factor app methodology, how should this configuration be provided?

Which THREE of the following are features provided by a service mesh like Istio? (Select THREE.)

Which THREE are benefits of using a container orchestration platform? (Select 3)

Which TWO of the following are core principles of cloud native architecture according to the CNCF?

A pod is stuck in the Pending state. The administrator runs 'kubectl describe pod' and sees the event '0/3 nodes are available: 3 Insufficient cpu.' What is the most likely cause?

Drag and drop the steps to create a ConfigMap from a file in Kubernetes into the correct order.

Which TWO are benefits of using a container orchestration platform like Kubernetes? (Select TWO.)

A team is deploying a microservices application on Kubernetes. They want to ensure that each microservice can be updated independently without affecting others, and that the application can tolerate the failure of a single microservice. Which cloud-native architecture principle are they applying?

A DevOps team wants to collect logs from all Kubernetes nodes and forward them to a central log storage system. Which tool is specifically designed for lightweight log aggregation and forwarding on Kubernetes nodes?

What is the role of etcd in a Kubernetes cluster?

A development team wants to implement a GitOps workflow for their Kubernetes deployments. Which tool is specifically designed for GitOps on Kubernetes?

Which TWO statements are true about Kubernetes namespaces? (Select 2)

A developer wants to expose a set of pods running a web application internally within the cluster using a stable IP address. Which Kubernetes resource should they create?

A developer creates a Pod with a container that writes logs to a file in an emptyDir volume. The Pod is then deleted, and a new Pod is created with the same emptyDir volume definition. What happens to the data in the emptyDir volume?

A cluster runs the Horizontal Pod Autoscaler (HPA) v2 for a Deployment named queue-worker. The HPA is configured with minReplicas: 2, maxReplicas: 10, and a target average CPU utilization of 60%. Metrics Server is installed and reports CPU for the Pods. During a burst, CPU utilization rises to 95% and stays there, but the Deployment remains at 2 replicas. Which condition most likely explains why the HPA is not scaling out?

Which three of the following are benefits of container orchestration? (Choose three.)

Which THREE of the following are benefits of using container orchestration? (Choose three.)

What is the role of an API gateway in a microservices architecture?

A development team is containerizing a monolithic application into microservices. Which practice aligns with cloud-native architecture principles?

You create a Deployment with 'replicas: 3' and update the pod template without changing the selector. After the update, you notice that only the new Pods are running, but old Pods have been terminated. What is the default update strategy?

Which Kubernetes object is used to store non-sensitive configuration data that can be consumed by pods?

A developer needs to run a one-off batch job that processes a dataset and then terminates. The job should run to completion and not restart after successful completion. Which Kubernetes resource is most appropriate for this task?

A Deployment is configured with 'strategy.type: RollingUpdate' and 'strategy.rollingUpdate.maxUnavailable: 0'. What is the effect during a rolling update?

A team uses ArgoCD with a Git repository that contains Helm charts. They want ArgoCD to automatically sync when a new image tag is pushed to the container registry. Which approach should they use?

A team wants to visualize metrics from Prometheus in a dashboard. Which tool is commonly used for this purpose?

What is the smallest deployable unit in Kubernetes that can be created and managed?

What is the primary purpose of a Namespace in Kubernetes?

A developer is troubleshooting a Pod that is stuck in the Pending state. They want to gather information to determine why the Pod has not been scheduled. Which two commands or outputs are most directly useful for this diagnosis? (Choose two.)

A team is designing a cloud-native application that requires each microservice to have its own database. This pattern is known as:

A team wants to implement cost monitoring for their Kubernetes clusters. Which approach is most effective?

A team is designing a cloud-native system that must remain available even if an entire availability zone fails. They want to distribute workloads across multiple zones and automatically recover from failures. Which cloud-native architectural approach BEST addresses this requirement?

A team uses Flux with the Source Controller and Kustomize Controller. They update a YAML file in Git to change a Deployment's replica count. What describes the synchronization flow?

Based on the exhibit, why is the pod web-pod not running?

Which tool is specifically designed for distributed tracing and is a Cloud Native Computing Foundation (CNCF) graduated project?

Which component runs on each worker node and ensures that containers are running as specified in the Pod spec?

Which component of the OpenTelemetry architecture is responsible for receiving data from instrumented applications and processing it before export?

A Pod is in the 'Pending' state. What is the most likely cause?

A Service of type ClusterIP is not resolving DNS names for pods. The pods are running and can communicate with each other via IP addresses. Which component should be checked first?

Which of the following best describes the purpose of the CNCF (Cloud Native Computing Foundation)?

A container image built using a Dockerfile with multiple layers is stored in a registry. When a node pulls this image, which statement about layers is true?

Which TWO of the following tools are commonly used for distributed tracing in cloud-native environments? (Select two.)

You are writing a Pod manifest and need to ensure the container always pulls the newest image from the registry, even if an image with the same tag already exists on the node. Which imagePullPolicy should you set?

You are reviewing the manifest for a Pod that must only run on nodes with the label `disktype=ssd`. The manifest includes the following snippet: ```yaml nodeSelector: disktype: ssd ``` After applying the manifest, the Pod remains in Pending state indefinitely. `kubectl get nodes --show-labels` shows no node has the `disktype=ssd` label. Which action will allow the Pod to be scheduled without modifying the Pod's nodeSelector?

In PromQL, which function would you use to calculate the per-second rate of increase of a counter over a specified time window?

A cloud-native application experiences intermittent failures when calling an external API. The team implements a pattern that allows the application to temporarily stop calling the failing API and serve stale data or a fallback response. Which resiliency pattern does this describe?

What is the purpose of a readiness probe in a Kubernetes pod?

Which TWO statements correctly describe the purpose of etcd in a Kubernetes cluster?

In OpenTelemetry, what is the purpose of the Collector component?

Drag and drop the steps to create a Kubernetes Namespace and deploy an application into it into the correct order.

A pod is stuck in Pending state. You run 'kubectl describe pod' and see the event '0/3 nodes are available: 1 node(s) had taint(s) that the pod didn't tolerate, 2 node(s) had insufficient memory.'. What is the most likely cause?

A platform engineer applies a Pod manifest that includes the field `spec.nodeName: k8s-worker-07`. The scheduler is running normally. What is the most accurate description of what happens to this Pod?

A cluster administrator needs to run a node-level log collector that must read files from /var/log on every node in the cluster, including nodes added later. The collector does not need to run on control plane nodes. Which Kubernetes resource should be used?

Which Kubernetes resource should be used to run a one-time task that performs a computation and then exits?

Which component runs on every Kubernetes node and ensures that the containers in a pod are running?

What is the purpose of a liveness probe in a Kubernetes pod?

Which of the following is a core principle of cloud native architecture as defined by the CNCF?

Which of the following is the correct definition of a Service Level Indicator (SLI)?

A developer is troubleshooting a Pod that is stuck in Pending state. The node has sufficient CPU and memory, and the scheduler logs show no errors. Which two factors could prevent the Pod from being scheduled? (Choose two.)

Which GitOps tool is specifically designed for Kubernetes and follows the declarative GitOps pattern, continuously reconciling the desired state from a Git repository?

Drag and drop the steps to troubleshoot a Pod stuck in CrashLoopBackOff into the correct order.

Which TWO of the following are deployment patterns that can be used to update applications with minimal downtime? (Choose two.)

A developer wants to deploy a stateless web application that should scale to 5 replicas. Each replica must be identical and should be automatically replaced if it fails. Which Kubernetes resource should be used?

A team wants to run a batch job that must complete successfully exactly once and then stop. The job processes a queue and should not be restarted after successful completion. Which Kubernetes resource is most appropriate for this requirement?

A team is designing a Kubernetes architecture for a new application. They need to understand which components are part of the control plane and which run on worker nodes. Which TWO of the following components run on every worker node in a standard Kubernetes cluster? (Choose two.)

Which TWO of the following are key characteristics of cloud-native applications? (Select two.)

Which Kubernetes resource is used to run a batch job that runs to completion?

An administrator must run a privileged DaemonSet on every node, including the control-plane node, to collect host logs. The control-plane node has a taint node-role.kubernetes.io/control-plane:NoSchedule. Which change allows the DaemonSet Pods to be scheduled on the control-plane node while keeping the taint intact?

Which TWO of the following are recommended practices for achieving observability in a Kubernetes cluster?

An administrator wants to perform a rolling update of a Deployment. Which TWO actions will achieve this?

A DevOps engineer wants to deploy a stateful application that requires stable network identities and persistent storage. Which Kubernetes resource is most appropriate?

Which THREE of the following are true about the Open Container Initiative (OCI)? (Select 3)

Which TWO of the following are benefits of using a container orchestration platform like Kubernetes? (Choose two.)

Which THREE of the following are valid Kubernetes resource types?

Which two components are part of the Kubernetes worker node? (Select TWO)

Which THREE are core principles of the Twelve-Factor App methodology?

Which TWO of the following are required fields when defining a container in a Kubernetes Pod spec? (Choose 2)

A DevOps engineer has created a ConfigMap named 'app-config' with some configuration data. They want to make that data available as environment variables in a pod. Which field in the pod spec should they use to achieve this?

A platform team wants to run a batch job that must complete successfully exactly once per day on a schedule. They need Kubernetes to create a Job object automatically at the specified times, and they want to keep a history of the last three successful and one failed Job for debugging. Which resource should they create?

Which Kubernetes controller ensures that a specified number of pod replicas are running at all times?

Which TWO are characteristics of the microservices architecture that are supported by container orchestration?

Which two of the following are valid ways to expose a Pod's container port to other resources? (Select two.)

Which deployment strategy is characterized by gradually shifting traffic from an old version to a new version of an application, often requiring a service mesh or ingress controller to manage traffic splitting?

Which of the following is a key principle of microservices architecture?

When creating a Deployment, you want to ensure that only a certain number of pods run at a time across all nodes. Which field in the Deployment spec controls this?

A developer has created a Deployment with 3 replicas. The application should be reachable from other Pods within the same cluster. Which Kubernetes resource should be used to provide a stable network endpoint?

What is the primary function of a service mesh like Istio?

You need to store a sensitive database password in Kubernetes. Which resource should you use?

A pod is experiencing high memory usage. The administrator wants to enforce that the pod is terminated if it exceeds a memory limit and restarted automatically, but also wants to guarantee a minimum amount of memory for the pod. Which resource specification should be used in the container definition?

A microservice application is experiencing high latency during traffic spikes. The team identifies that the database connection pool is exhausted. They want to implement a pattern that helps decouple the microservice from direct database connections and smooth out traffic bursts. Which design pattern should they apply?

A pod is stuck in the 'Pending' state. You run 'kubectl describe pod mypod' and see the event: '0/3 nodes are available: 1 node had taint that the pod didn't tolerate, 2 Insufficient cpu.' What is the most likely cause?

In distributed tracing, what is a 'span'?

A developer creates a Deployment with 3 replicas. The developer runs 'kubectl get pods' immediately after creation and sees that only 1 pod is in Running state, and the other 2 are Pending. What is the most likely reason for this?

Which two components are part of the Kubernetes control plane? (Select two.)

Which TWO statements about containers are true compared to virtual machines? (Select TWO.)

Which component is responsible for aggregating metrics from Kubernetes nodes and exposing them to the metrics API?

An organization wants to adopt a cloud-native approach for its new application. Which characteristic is most important for the application to be considered cloud-native?

In GitOps with ArgoCD, what does 'self-healing' refer to?

A pod has resource requests: cpu: 250m, memory: 512Mi and limits: cpu: 500m, memory: 1Gi. If the container tries to use 600m CPU and 700Mi memory, what will happen?

A pod is stuck in 'Pending' state. 'kubectl describe pod' shows '0/4 nodes are available: 4 Insufficient memory'. What is the most likely cause?

Which resource provides stable network endpoints to a set of pods, regardless of pod IP changes?

Which THREE of the following are benefits of using an event-driven architecture? (Choose three.)

A pod is running but you need to view the contents of a file '/var/log/app.log' inside the container to debug an issue. Which kubectl command allows you to do this without modifying the pod?

A Deployment named 'web' has 3 replicas. You run 'kubectl scale deployment web --replicas=5'. What will happen?

Which three components are part of the Kubernetes control plane? (Select THREE)

Which Kubernetes control plane component is responsible for maintaining the desired state of the cluster, such as ensuring the correct number of pods are running?

Which of the following is a key principle of the 12-factor app methodology?

Which command would you run to get a list of all pods in all namespaces?

Which DORA metric measures the percentage of deployments that cause a failure in production?

Which THREE of the following are key characteristics of microservices architecture?

What is the primary purpose of the Kubernetes control plane component 'kube-apiserver'?

In a blue-green deployment strategy, at any given time, only one environment (blue or green) is active. What is the primary advantage of this approach?

Which of the following is NOT one of the three pillars of observability in cloud-native environments?

You need to deploy an application that requires exactly one pod per cluster node for logging purposes. Which Kubernetes workload resource should you use?

You need to ensure that a set of pods in a Deployment can be reached by other pods using a stable IP address and DNS name. Which Kubernetes object should you use?

Which TWO components are part of the Kubernetes control plane?

Which THREE of the following are valid apiVersions for Kubernetes resources?

Which of the following is a benefit of using an API gateway pattern?

Drag and drop the steps for a rolling update of a Kubernetes Deployment into the correct order.

You need to run a batch job that processes data and then exits. Which Kubernetes resource type is most appropriate for this workload?

You run 'kubectl get pods' and see a Pod in the 'Pending' state. Which of the following is a likely cause?

A cloud-native application uses a service mesh (Istio) for traffic management. The team notices increased latency in inter-service communication. Which likely cause should be investigated first?

A platform engineer is explaining cloud-native architecture to a new team. The team asks which statement BEST describes the relationship between microservices and cloud-native architecture. Which answer is correct?

What is the primary purpose of an API gateway in a microservices architecture?

What is the Open Container Initiative (OCI) responsible for?

Which TWO of the following are benefits of using a Deployment over managing ReplicaSets directly? (Choose two.)

A developer wants to run a one-off database migration task in Kubernetes that must complete successfully and then stop. The task should not restart after successful completion, and the developer wants to inspect logs after it finishes. Which resource should be created?

Which THREE of the following are important considerations when defining SLOs (Service Level Objectives)? (Select three.)

Which TWO of the following are valid ways to expose a set of pods as a network service in Kubernetes? (Select two.)

Which TWO statements are true about cloud-native architecture?

What is the primary purpose of a liveness probe in a container?

Which TWO statements correctly describe how Kubernetes handles self-healing? (Select two.)

What is the smallest deployable unit in Kubernetes?

A user wants to run a one-time batch task that processes a dataset and then exits. The task should not be restarted if it completes successfully. Which Kubernetes resource is most appropriate?

You need to run a batch job that processes a queue and then terminates. Which Kubernetes resource is most appropriate?

A DevOps engineer needs to expose a set of pods running an HTTP API to external clients. The pods are stateless and should be load-balanced. Which Kubernetes resource should they use?

A Kubernetes cluster runs Prometheus for monitoring. The operations team wants to receive alerts when the 99th percentile latency of an HTTP service exceeds 500ms for 5 minutes. They have a metric http_request_duration_seconds histogram. Which PromQL expression should they use to calculate the 99th percentile latency?

A cluster administrator needs to ensure that a logging agent runs on every node in the cluster, including nodes added in the future. The agent should collect logs from each node and forward them to a central system. Which Kubernetes resource should be used?

Which component of Kubernetes is responsible for maintaining the desired state of the cluster?

Which of the following best describes a key advantage of containers over virtual machines?

A DevOps engineer wants to update a Deployment's container image from 'v1' to 'v2' with zero downtime. Which kubectl command should they use?

Which of the following is a container runtime that implements the Container Runtime Interface (CRI)?

A Kubernetes cluster runs a DaemonSet named 'node-agent' that must run on every node, including the control-plane node. The control-plane node has a taint 'node-role.kubernetes.io/control-plane:NoSchedule'. The DaemonSet currently does not schedule pods on the control-plane node. Which change to the DaemonSet spec will ensure its pods run on the control-plane node?

A pod remains in 'Pending' state. Upon inspecting the pod with 'kubectl describe pod', you see the message '0/1 nodes are available: 1 node(s) had taint {node.kubernetes.io/disk-pressure: }, that the pod didn't tolerate'. What is the most likely cause?

In GitOps with ArgoCD, what happens when the desired state in Git differs from the live state in the cluster?

A team observes that a Pod is stuck in CrashLoopBackOff. The Pod runs a single container with an entrypoint that exits with non-zero code after a few seconds. The team wants to inspect the container's logs to understand why it is crashing. Which command should they use?

In the context of distributed tracing, what is a 'span'?

An application requires that configuration data be mounted as a file inside the container. The data may change at runtime, and the application should automatically read the updated values without restarting. Which approach should be used?

Which Kubernetes component is responsible for maintaining the desired state of the cluster by running controllers?

Which TWO components are part of the Kubernetes worker node?

A microservices application has multiple services that need to discover each other by name. Which Kubernetes object provides built-in service discovery via DNS?

A platform engineer is troubleshooting a Pod that is stuck in Pending. The engineer suspects the scheduler cannot place it. Which two commands are appropriate to gather evidence about why the Pod has not been scheduled? (Choose two.)

A developer is troubleshooting a Pod that remains in the Pending state and never gets scheduled. The developer suspects the issue is related to node selection constraints. Which two kubectl commands can help identify why the Pod cannot be scheduled? (Choose two.)

Which TWO practices are recommended for designing cloud-native microservices? (Choose 2)

Which THREE of the following are valid container runtimes that can be used with Kubernetes via the Container Runtime Interface (CRI)? (Select three.)

Which command creates a Deployment named 'nginx' from the 'nginx:1.19' image?

Which resource in Kubernetes is used to expose a set of pods as a network service?

You want to isolate a team's workloads within a Kubernetes cluster so that they cannot see or access resources from other teams. Which feature should you use?

In a serverless architecture using Knative, what happens when a function finishes processing an event and there are no pending events?

Which two of the following are valid ways to set resource constraints on a container in a Pod spec?

Which GitOps tools use a pull-based approach to synchronize the desired state in a Git repository with the actual state in a Kubernetes cluster? (Select all that apply.)

Which Kubernetes object is used to store non-confidential configuration data that can be consumed by pods?

Which component is responsible for running containers in a Kubernetes node and implements the Container Runtime Interface (CRI)?

Which Kubernetes resource provides a stable IP address and DNS name to access a set of pods?

You run 'kubectl get pods' and see that a pod named 'web-frontend' is in 'Pending' state for more than 5 minutes. What is the most likely cause?

A team deploys an application as a StatefulSet with three replicas. They need each Pod to have a stable network identity and its own persistent storage that survives Pod rescheduling. Which two features of StatefulSet satisfy these requirements?

A developer wants to run a single instance of a stateless web application that should be automatically restarted if it fails, but does not require scaling or updates. Which Kubernetes resource is most appropriate?

What is the smallest deployable unit in Kubernetes that you can create and manage?

Which component runs on every worker node and is responsible for ensuring that containers are running in a pod as specified in the PodSpec?

A cluster administrator notices that a Deployment's pods are not receiving traffic as expected. The Service selector matches the pod labels. What is a possible cause?

Which of the following is a correct apiVersion for a Deployment in a modern Kubernetes cluster (v1.19+)?

An application Pod needs to read a database password at runtime. The security team requires that the secret material never be stored in the Pod's container image or in a ConfigMap, and that updates to the secret be reflected in the running container without recreating the Pod. Which approach satisfies these requirements?

A developer created a Deployment with 5 replicas. After applying the manifest, only 3 pods are Running; the other 2 are Pending. Which is the MOST likely cause?

Which Kubernetes control plane component is responsible for maintaining the desired state of the cluster by running controller loops?

Match each Kubernetes storage concept to its description.

You want to run a batch job that processes a queue and then terminates. Which Kubernetes resource should you use?

What is the purpose of the circuit breaker pattern in a microservices architecture?

What is context propagation in distributed tracing?

You notice that a pod is in 'Pending' state for a long time. Which of the following is the most likely cause?

A developer needs to provide a pod with a persistent volume that must be mounted by multiple pods simultaneously for read-write access. The underlying storage system supports concurrent writes from multiple nodes. Which volume type should be used?

A cluster administrator is configuring a NetworkPolicy for a set of pods labeled 'role=db' in the 'backend' namespace. The policy should allow ingress only from pods labeled 'role=api' in the 'frontend' namespace, and only on TCP port 6379. Which NetworkPolicy specification correctly enforces this?

A delivery team's manifests are nearly identical across dev, staging, and production, differing only in replica counts, image tags, and resource limits. They want to keep one shared base and apply environment-specific changes without introducing a templating language. Which approach fits best?

You want to ensure that a Pod runs on every Node in the cluster. Which resource should you use?

What is the primary purpose of the kube-scheduler in a Kubernetes cluster?

An application requires that a set of Pods each be assigned a unique DNS name that can be used for peer-to-peer communication. Which Kubernetes resource should be used?

A startup wants to minimize downtime during application updates in Kubernetes. Which deployment strategy should they use?

Which command would you use to get the logs of a pod named 'backend' in the 'production' namespace?

Which Kubernetes object provides a stable IP address and DNS name for a set of Pods?

Which two scenarios would benefit from using a StatefulSet instead of a Deployment? (Choose two.)

A container image is built from a Dockerfile with multiple layers. Which statement about container image layers is TRUE?

A cluster administrator wants to restrict which nodes a Pod can be scheduled on based on node labels, while also allowing the scheduler to prefer certain nodes but still run elsewhere if needed. Which combination of features should be used?

What is the primary purpose of structured logging?

Drag and drop the steps to create a Kubernetes deployment using kubectl into the correct order.

A cluster administrator needs to grant a user permission to view Pods in the 'staging' namespace but not in any other namespace. Which combination of Kubernetes objects should be created?

You want to view the logs of a container named 'app' inside a pod named 'web-pod-7d4f8'. Which kubectl command should you use?

A Deployment manages ReplicaSets. What is the primary benefit of using a Deployment over directly managing ReplicaSets?

Which command would you use to view the logs of a container named 'sidecar' inside a pod named 'app'?

Which tool is primarily used for distributed tracing in cloud native environments?

A developer creates a Pod with a volume of type emptyDir. The Pod writes data to the volume and then is deleted. What happens to the data?

A platform team is adopting cloud-native principles for a new microservices application. They want to ensure that each service can be independently deployed and scaled without affecting other services. Which design principle BEST supports this goal?

What does the 'kubectl get pods' command display?

Which THREE of the following are benefits of structured logging? (Select three.)

In serverless computing, what is the primary characteristic of Function-as-a-Service (FaaS)?

A container image is being pushed to a private registry. What is the correct workflow?

Which TWO of the following are true about Kubernetes Pods?

An organization wants to implement a serverless function that scales to zero when not in use. Which technology is specifically designed to achieve this on Kubernetes?

You need to run a batch job that processes a queue of 1000 items. The job should run to completion and then terminate. Which Kubernetes resource is BEST suited for this workload?

You have a Kubernetes cluster with multiple namespaces. You need to allow communication only from pods with label 'app: frontend' to pods with label 'app: backend' in the same namespace. Which resource should you use?

Which Kubernetes control plane component is responsible for maintaining the desired state of the cluster by running reconciliation loops?

Which of the following best describes 'Infrastructure as Code' (IaC)?

A development team wants to adopt a cloud-native architecture for a new application. Which set of principles BEST describes the cloud-native approach?

A platform team wants to package a Kubernetes application — including its Deployment, Service, ConfigMap, and default configuration values — into a single versioned artifact that can be installed and rolled back as one unit. Which cloud native tool is purpose-built for this?

A platform team runs a 20-node Kubernetes cluster. They want a single Pod to run on every node so that a node-exporter agent can collect host metrics. They also want the Pod to be automatically created when a new node joins the cluster. Which workload resource should they use?

Drag and drop the steps to set up a Kubernetes cluster using kubeadm into the correct order.

Which TWO of the following are control plane components? (Select TWO)

A pod is stuck in the Pending state. Running 'kubectl describe pod <pod-name>' shows the event: '0/3 nodes are available: 1 node had taint {node.kubernetes.io/disk-pressure: }, 2 nodes had taint {node.kubernetes.io/memory-pressure: }'. What is the most likely cause?

A pod has a liveness probe that returns failure. What action will Kubernetes take?

Which command would you use to apply a manifest file 'deployment.yaml' to a Kubernetes cluster?

A team uses a CI pipeline that builds a container image, scans it for vulnerabilities, and then pushes it to a registry. The scan reports a critical vulnerability in a library used by the application. The team wants to prevent images with critical vulnerabilities from being deployed to production. Which approach best enforces this policy in a Kubernetes-native way?

What is the purpose of a Namespace in Kubernetes?

Which THREE statements about Labels and Selectors are correct?

You have a multi-container pod with a main application container and a sidecar container that handles log shipping. The sidecar container should start before the main container and stop after the main container finishes. Which pod configuration should you use?

Which three of the following are valid ways to interact with the Kubernetes API? (Select THREE.)

Which command is used to view detailed information about a specific pod?

Which THREE of the following are true about Kubernetes Namespaces?

A pod in the 'production' namespace is in a CrashLoopBackOff state. The pod has been running successfully for several days. You run 'kubectl describe pod app-pod -n production' and see the message: 'OOMKilled'. What is the MOST appropriate action to resolve this issue?

You run the command 'kubectl get pods -n default' and see no pods listed. However, you are sure there should be pods. What is the most likely cause?

What is the purpose of Alertmanager in Prometheus?

An operations team runs a stateless web application in a Deployment with 3 replicas. They need each Pod to be able to read application configuration from a single source, and updates to that configuration should be reflected in the running Pods without rebuilding the container image. Which Kubernetes resource should they use to store the configuration and inject it as environment variables into the Pods?

You want to expose a set of pods running on node port 30080 to external traffic. Which Service type should you use?

A container in a pod has been restarted multiple times with 'CrashLoopBackOff' state. What does this indicate?

Which THREE of the following are responsibilities of the kube-controller-manager?

A development team deploys a microservice that crashes every few minutes. The deployment uses a single replica, and the pod restarts repeatedly. Which Kubernetes feature should be enabled to ensure the service remains available during failures?

A platform team wants to package a multi-service application into a single distributable artifact that includes Kubernetes manifests, default configuration values, and a version number. Which tool is purpose-built for this task?

What is the primary purpose of the sidecar container in a service mesh?

Which statement accurately describes a key difference between containers and virtual machines?

A microservice logs errors when connecting to the database. The logs show 'connection refused'. Which troubleshooting step should be taken first?

What is the smallest deployable unit in Kubernetes that can be created, scheduled, and managed?

What is Helm's role in Kubernetes?

An organization uses GitOps with ArgoCD to manage Kubernetes deployments. What is the PRIMARY advantage of this approach over traditional imperative deployment methods?

A developer creates a Deployment with 3 replicas. After a few seconds, they run `kubectl get deployments` and see `READY 2/3`. They want to quickly identify why one replica is not ready. Which command should they use to inspect the status of the individual Pods?

Which TWO of the following are true about container networking basics? (Choose 2)

Which two of the following are responsibilities of the kubelet? (Select TWO.)

Which component runs on every worker node and is responsible for ensuring that containers are running in a pod according to the pod specification?

You have a microservices application with a frontend service that needs to communicate with a backend service running in a different namespace ('backend-ns'). The default namespace for the frontend is 'frontend-ns'. What DNS name should the frontend use to reach the backend service named 'backend-svc'?

Which of the following is a core principle of the 12-factor app methodology?

Which of the following is a characteristic of immutable infrastructure?

What is the purpose of a readiness probe in a Kubernetes pod?

A company wants to ensure that a database pod runs on a node with SSD storage. How should this be achieved?

What is the purpose of the Container Runtime Interface (CRI) in Kubernetes?

In a CI pipeline, image scanning is integrated to detect vulnerabilities. What is the best practice when a critical vulnerability is found in a base image?

Which CNCF project maturity level indicates that a project has adopted the CNCF Code of Conduct and is considered early-stage?

You notice that a newly created Pod remains in 'Pending' state. Which of the following is the MOST likely cause?

Which TWO of the following are characteristics of microservices architecture? (Choose 2)

A pod has resource requests of 512Mi memory and 500m CPU, and limits of 1Gi memory and 1 CPU. The node has 4Gi memory and 2 CPU cores. If the pod tries to use 700m CPU, what will happen?

A team runs a stateless web application as a Deployment with 4 replicas. They want each replica to be reachable through a single stable virtual IP inside the cluster, and they want the traffic distributed across all healthy replicas. They have already created a Service of type ClusterIP with the correct selector. A new engineer asks what backend object the Service actually targets. What does the Service select?

A team is using Kustomize to manage configurations for different environments. They want to create a variant of a base deployment that uses a different number of replicas. Which Kustomize feature should they use?

A developer wants to run a one-time task that creates a database schema and then exits. Which Kubernetes workload type is most appropriate?

In a container image built from a Dockerfile, what is the purpose of the CMD instruction?

Which of the following is a key principle of the 12-factor app methodology related to managing configuration?

What is GitOps?

Which TWO of the following are valid reasons to use a DaemonSet instead of a Deployment? (Select 2)

A Deployment named 'app-deploy' is configured with strategy type: RollingUpdate. You want to update the container image to a new version. What kubectl command should you use?

A platform engineer is explaining the role of the Kubernetes API server in a cloud-native architecture. Which statement BEST describes its primary function?

A team is deciding how to isolate workloads across namespaces. Which two statements about Kubernetes Namespaces are accurate? (Choose two.)

Which THREE of the following are valid ways to expose a Service to external traffic? (Select exactly three.)

A platform team is standardizing on Kubernetes-native delivery. They want to adopt practices that make releases repeatable and reduce drift between environments. Which two practices best support that goal? (Choose two.)

Which THREE are responsibilities of the OpenTelemetry project? (Select three.)

A cluster administrator notices that a Pod scheduled on a node is stuck in the Pending state. The Pod requests 8 CPU cores, but the node has only 4 allocatable CPU cores. The scheduler logs show a FailedScheduling event with the message 'Insufficient cpu'. Which action will allow the Pod to be scheduled without reducing its CPU request?

What is the primary advantage of using Helm to package a Kubernetes application?

Which TWO of the following are best practices for implementing observability in a cloud-native environment?

Which Open Container Initiative (OCI) specification defines the format of container images?

Which TWO of the following are true about Kubernetes Services? (Select 2)

A team wants a single stable IP address and DNS name that load-balances traffic across a changing set of backend Pods. The Pods are managed by a Deployment and are regularly replaced during rollouts. Which Kubernetes object should they create to provide this stable virtual IP and DNS entry?

A cluster administrator needs to run a node-level logging agent on every node, including nodes added later. The agent must collect logs from the host filesystem and must run even if a node is cordoned. Which workload resource should be used?

Which service mesh component is responsible for handling inter-service communication as a sidecar proxy?

An administrator needs to run a stateful database in Kubernetes that requires a stable network identity, persistent storage that survives pod rescheduling, and ordered deployment and scaling. Which Kubernetes resource should be used to meet these requirements?

A pod is stuck in 'Pending' state. After running 'kubectl describe pod', you see the event: '0/3 nodes are available: 3 Insufficient cpu'. What is the most likely cause?

Your organization runs a cloud-native e-commerce platform on Kubernetes. The platform consists of several microservices: a frontend service, an order service, a payment service, and a shipping service. All services communicate via HTTP REST APIs. Recently, during a flash sale event, the platform experienced a cascading failure. The order service became overwhelmed with requests and started responding slowly. This caused the frontend service to time out waiting for order responses, and eventually the frontend service crashed due to exhausted thread pools. The payment and shipping services were unaffected because they are called asynchronously via a message queue. You need to redesign the system to prevent such cascading failures in the future. Which approach is the most effective?

A Kubernetes Deployment is configured with 'strategy.type: RollingUpdate'. The team wants to ensure that during an update, no more than 25% of pods are unavailable at any time. Which specification should be added?

Which control plane component is responsible for persisting the entire cluster state?

A team is designing a Kubernetes cluster for a production workload that requires high availability. They have three worker nodes in different availability zones. Which statement about scheduling Pods is correct?

Which TWO components run on every worker node in a Kubernetes cluster?

Match each cloud native concept to its definition.

A platform team runs a Kubernetes cluster where the kubelet and container runtime expose metrics on each node. The team wants to collect node-level CPU and memory metrics into Prometheus without deploying a separate exporter on every node. Which component should they configure Prometheus to scrape?

A developer runs `kubectl get pods` and notices that one Pod is stuck in the `Pending` state. The Pod's resource requests are modest, and the node has sufficient CPU and memory. Which of the following is the MOST likely reason the Pod is not being scheduled?

A developer wants to monitor the health of a Kubernetes deployment by checking if the number of ready replicas matches the desired replicas. Which metric from kube-state-metrics should they query?

Which component of the control plane is the only one that directly interacts with etcd?

Which TWO of the following are valid uses of Kubernetes Namespaces? (Select 2)

In a service mesh architecture, which component is responsible for intercepting and managing traffic between microservices?

What is the Container Runtime Interface (CRI)?

You have a Kubernetes cluster with a Deployment that uses a PersistentVolumeClaim (PVC) to store application data. The PVC is bound to a PersistentVolume (PV) with a Retain reclaim policy. You delete the Deployment and the PVC. What happens to the underlying storage?

Which command is used to view detailed information about a specific pod, including events and conditions?

In a multi-cloud architecture, what is a common use case for a service mesh?

A cluster administrator deploys a web application as a Deployment named 'web' with 4 replicas. Users report that requests to the application sometimes reach a Pod that is still starting up and not ready to serve traffic. Which Kubernetes object should the administrator configure to ensure only ready Pods receive traffic?

Which THREE are key benefits of using a service mesh in a cloud-native architecture? (Choose 3)

A cluster administrator needs to run a critical system daemon that must continue running even when a node is marked as unschedulable for maintenance. The DaemonSet Pods should tolerate the node's taint. Which taint should the DaemonSet Pod tolerate to achieve this?

An administrator needs to expose a set of pods running a web application on a static port on each node's IP address. Which Service type should they use?

A company is deploying a microservices application on Kubernetes. They want to ensure that configuration data, such as database URLs and feature flags, can be updated without rebuilding container images. Which Kubernetes resource should they use?

Which TWO actions can improve the DORA metric 'Mean Time to Recovery (MTTR)'?

In a YAML manifest for a Deployment, which field defines the number of pod replicas?

What is the primary purpose of a container registry in a CI/CD pipeline?

You have a Deployment with the following rollout strategy: rollingUpdate: maxSurge: 1, maxUnavailable: 0. What behavior does this configuration enforce?

A platform team runs a Kubernetes cluster with the OpenTelemetry Collector deployed as a DaemonSet. They want to collect node-level metrics such as CPU and memory usage from every node without modifying application code. Which receiver should they configure in the Collector's pipeline?

A platform team runs a multi-tenant Kubernetes cluster for several product groups. They want each group's workloads to be logically isolated from one another, with separate quota limits and separate RBAC bindings, while still sharing the same cluster control plane and worker nodes. Which Kubernetes construct BEST provides this isolation boundary?

In an event-driven architecture using a message broker, which component is responsible for receiving events and forwarding them to subscribed services?

Which Kubernetes object is used to store non-sensitive configuration data that can be consumed by pods?

A team uses a Deployment with 3 replicas and a RollingUpdate strategy. They update the container image. During the update, one of the new pods fails to start. What will happen by default?

A user runs 'kubectl get pods -n default' but receives an error: 'Error from server (Forbidden): pods is forbidden: User cannot list resource pods in API group'. What is the most likely cause?

A Kubernetes Deployment manages a set of pods. What is the primary purpose of a Deployment?

Which THREE of the following are core principles of immutable infrastructure? (Choose 3)

A cluster administrator examines a node and notices that the kubelet is running, but the node's status shows 'NotReady'. The administrator runs 'systemctl status containerd' on the node and finds the service is inactive. Which component's failure most directly explains the node's 'NotReady' condition?

A ClusterIP Service named 'db-service' in namespace 'prod' selects pods with label 'app: database'. A pod in the same cluster needs to reach this service using DNS. What is the fully qualified domain name (FQDN) for the service?

Which of the following is a benefit of using a service mesh?

Which TWO of the following are valid ways to expose a Service to external traffic?

A developer wants to expose a set of pods running a web application on a stable IP address. Which Kubernetes resource should they create?

Which of the following is a key benefit of using containers over virtual machines?

A platform engineer needs to run a one-time batch job that processes a dataset and then exits. The job must run exactly once and not be restarted if it completes successfully. Which Kubernetes resource should be used?

Which TWO statements about Kubernetes namespaces are true?

According to the 12-factor app methodology, how should an application store configuration that varies between deployments (e.g., database connection strings)?

A developer wants to run a stateless web application with 5 replicas and ensure that when a new version is released, Pods are updated one by one with no downtime. Which Kubernetes resource is best suited?

Which CNCF project is at the 'Graduated' maturity level and is widely used for container orchestration?

Which TWO of the following are characteristics of a Kubernetes Pod?

Match each Kubernetes command (kubectl) to its primary function.

A developer wants to run a one-time batch job that processes a dataset and then exits. The job must complete successfully and not be restarted after completion. Which Kubernetes resource should be used?

Which TWO of the following are true about service discovery in Kubernetes? (Choose 2)

A team wants to deploy a stateful application that requires each pod to have a unique, stable network identity and persistent storage that persists across rescheduling. Which Kubernetes resource is most appropriate?

You run 'kubectl get pods' and see a pod with status 'Pending'. Which is the most likely cause?

Which of the following correctly describes the concept of 'immutable infrastructure' in the context of container orchestration?

A cluster administrator wants to ensure that a specific pod only runs on nodes that have an SSD for local storage. The nodes with SSDs have the label 'disk-type: ssd'. How should the administrator configure the pod to enforce this constraint?

What is the purpose of a circuit breaker pattern in microservices?

A developer wants to run a batch job that processes a large dataset. The job should run to completion, and if the Pod fails, it should be retried up to 4 times before being marked as failed. Which Kubernetes resource and configuration should be used?

A developer needs to store non-confidential configuration data, such as a database hostname and port, that can be consumed by multiple Pods in a namespace. The data should be decoupled from the Pod specification to allow updates without rebuilding images. Which Kubernetes resource is designed for this purpose?

Which THREE of the following practices are essential for a secure cloud native CI/CD pipeline?

Which TWO of the following are core principles of the 12-factor app? (Choose 2.)

A Pod is stuck in 'Pending' state. Which command is most helpful to diagnose the issue?

A developer created a Deployment with image 'myapp:v1' and then ran 'kubectl set image deployment/myapp myapp=myapp:v2'. What is the effect of this command?

Which Kubernetes component is responsible for maintaining the desired state of the cluster by running controller loops?

A developer wants to store non-sensitive configuration data, such as a database hostname and port, that multiple pods in different namespaces will consume as environment variables. The data must be reusable and not hardcoded in pod specs. Which Kubernetes resource is most appropriate?

You deploy a web application as a Deployment with 3 replicas. Each pod runs an Nginx container that listens on port 80. You need to make the application accessible from outside the cluster on a stable IP address that does not change even if nodes are replaced. Which Service type should you use?

A cluster administrator needs to run a Pod that requires access to a raw block device on a specific node. The Pod must be scheduled only on nodes labeled disktype=ssd, and it must tolerate a taint hardware=gpu:NoSchedule that exists on those nodes. Which combination of Pod spec fields is required?

Which Kubernetes object is used to logically isolate resources within a cluster, such as for separating environments like dev and prod?

Which THREE of the following are valid ways to assign a pod to a specific node? (Choose three.)

In the context of the 12-factor app methodology, which factor emphasizes storing configuration in environment variables?

A developer needs to run a one-off database migration job in a Kubernetes cluster and ensure it completes successfully before a new application version is rolled out. Which Kubernetes resource should be used for the migration task?

A team wants to ensure that at least 99.9% of all requests to their application complete within 500ms over a 30-day window. How should this requirement be classified?

Which CNCF project maturity level indicates that a project has successfully adopted the CNCF governance and is considered stable for production use?

A Deployment has a strategy of RollingUpdate with maxSurge=1 and maxUnavailable=0. The Deployment manages 3 replicas. The image is updated. What happens during the update?

In a CI/CD pipeline, what is the difference between continuous delivery and continuous deployment?

Which THREE of the following are important security practices in a container image CI/CD pipeline?

What is the purpose of a Kubernetes Service?

A developer creates a Pod with the following YAML snippet: spec: containers: - name: web image: nginx ports: - containerPort: 80 The Pod is running, but the developer cannot reach it from another Pod in the same namespace using the Pod's IP address. Which command should the developer run first to verify that the container process is listening on port 80?

Which of the following is a valid use case for a DaemonSet?

What is the OCI (Open Container Initiative) responsible for?

A user reports that they can access a service by its ClusterIP but not by its DNS name from within the cluster. What is the most likely cause?

A development team is adopting a GitOps workflow for their Kubernetes applications. They want to ensure that the cluster state always matches the desired state defined in Git. Which component is responsible for continuously reconciling the cluster with the Git repository?

A developer creates a Pod with a single container that writes data to /data. The Pod spec includes a volume of type hostPath with path /mnt/data. After the Pod is deleted, the developer notices that the data persists on the node. What is the primary reason for this behavior?

An application requires that a specific set of pods be placed on nodes labeled with 'gpu=true'. Which Kubernetes field should be used in the pod spec to enforce this?

An administrator is troubleshooting a cluster and runs `kubectl get pods -n kube-system`. They see a Pod named `kube-apiserver-controlplane` running on the control plane node. Which statement best describes the role of this component?

Which component runs on every worker node and ensures that containers are running in a Pod as specified in the Pod manifest?

A developer creates a Deployment with 'replicas: 3'. After applying the manifest, only 2 pods are running. Which command would help identify why the third pod was not created?

A pod is in CrashLoopBackOff state. 'kubectl logs pod' shows 'Error: cannot connect to database at db-service:5432'. The database Service exists and is reachable from other pods. What is the most likely cause?

A platform team is designing a system that must continue serving requests for a product catalog even if the recommendation service becomes unavailable. The recommendation service calls the catalog service to fetch item details, and when it fails, the catalog service should keep responding to user traffic. Which cloud-native architecture principle BEST describes the required behavior for the catalog service?

Which command would you use to view the current state of all Pods in the default namespace?

An application requires that a pod must not be scheduled on the same node as another pod from the same Deployment. Which configuration should be used?

Which THREE of the following are benefits of using a service mesh? (Select three.)

A Kubernetes administrator needs to ensure that a set of pods can only communicate with each other and with a specific external API, while blocking all other traffic. Which Kubernetes feature should be used to enforce this?

Which THREE of the following are valid reasons to use a StatefulSet instead of a Deployment? (Select 3)

A pod is running but its container exits with code 137. The pod logs show 'Killed'. What is the most likely cause?

A cluster administrator runs `kubectl taint nodes node1 dedicated=gpu:NoSchedule` and then creates a Pod with toleration `dedicated=gpu:NoSchedule` but no node affinity. What is the resulting behavior?

Which TWO of the following are core principles of the 12-factor app methodology? (Select TWO.)

A pod has both resource requests and limits defined. The container is using more CPU than the request but less than the limit. What will happen?

A development team wants to package and deploy a multi-tier application to Kubernetes. They need to template Kubernetes manifests with environment-specific values and manage releases with versioning and rollback capabilities. Which tool is purpose-built for this?

A cluster administrator needs to run a one-time database migration job that must complete successfully before a new application version is deployed. The job should retry up to 4 times if it fails and should be automatically cleaned up 1 hour after completion. Which Kubernetes resource should be used?

A Kubernetes cluster has a pod that is stuck in the 'Pending' state. The operations team runs 'kubectl describe pod' and sees the event: '0/3 nodes are available: 3 Insufficient cpu.' What is the most likely cause of this issue?

Which command would you use to view the logs of a container named 'nginx' in a Pod named 'web-pod'?

A developer wants to ensure that a pod runs only on nodes with SSDs. Which mechanism should be used?

What is the primary purpose of the CNCF (Cloud Native Computing Foundation)?

Which of the following is true about Prometheus's pull-based model for collecting metrics?

A Prometheus alert rule fires when the error rate exceeds 5% for 5 minutes. The alert is sent to Alertmanager. What must be configured in Alertmanager to ensure the alert is deduplicated, grouped, and routed to the correct team?

You run 'kubectl get pods' and see a pod in 'Pending' state for over 5 minutes. You describe the pod and see '0/1 nodes are available: 1 Insufficient memory'. What is the most likely cause?

Which THREE of the following are core components of a Kubernetes worker node?

A platform team runs a StatefulSet named `db` with three replicas in the `prod` namespace. An operator must connect directly to the third Pod's network identity for a manual data repair. Which stable DNS name resolves to that specific Pod?

A platform team runs a 12-node Kubernetes cluster where each node hosts roughly 30 pods. They deployed Prometheus with a ServiceMonitor that scrapes every pod's /metrics endpoint every 15 seconds, but now the Prometheus pod is frequently OOMKilled and scrape targets intermittently report 'context deadline exceeded'. Which change best addresses the root cause while preserving observability?

Which Kubernetes component is the primary entry point for all administrative tasks and API requests?

Which Kubernetes component is responsible for storing the cluster state?

You have a microservices application deployed as a set of Pods in a Kubernetes cluster. You need to ensure that Pods can discover each other using stable DNS names. Which Kubernetes resource should you create?

Which kubectl command is used to view detailed information about a Kubernetes resource?

Which component in an event-driven architecture is responsible for decoupling event producers from consumers?

In a microservices architecture, which pattern is used to prevent cascading failures by limiting the number of concurrent requests to a service?

You create a Service of type NodePort with nodePort: 30080. The cluster's nodes have IP addresses 10.0.0.1 and 10.0.0.2. From outside the cluster, which address and port can you use to access the Service?

A pod named 'web-app' is not able to resolve the hostname 'db-service' from another namespace 'data'. The 'db-service' Service exists in the 'data' namespace. What is the most likely cause?

Which practice is a key principle of cloud-native architecture?

You need to ensure that a pod runs on a specific node that has an SSD. The node has the label 'disktype=ssd'. How should you configure the pod to target this node?

Which two components are part of the Kubernetes worker node? (Choose two.)

Which TWO of the following are characteristics of a microservices architecture? (Select 2)

A developer wants to deploy a stateful application that requires stable network identities and persistent storage. Which Kubernetes resource is best suited for this workload?

Which TWO statements are true about Kubernetes Deployments?

Which TWO of the following are essential components of a GitOps workflow? (Select two.)

A team runs a stateful application in a Kubernetes cluster. They need each Pod to have a stable network identity and its own persistent storage that survives Pod rescheduling. Which controller should they use?

An architecture review is comparing the sidecar proxy model used by service meshes against embedding resilience logic directly in each application's code. Which TWO statements accurately describe advantages of the sidecar proxy approach? (Choose two.)

What is the primary purpose of a Kubernetes Service?

What is the primary benefit of containers over virtual machines?

A team runs a stateless web application in Kubernetes. They have a Deployment named 'web-app' with 5 replicas. They want to ensure that a Service named 'web-svc' distributes traffic evenly to all healthy pods. Which type of Service should they use?

Which Kubernetes component is the primary entry point for all administrative tasks and exposes the REST API?

A developer needs to run a one-off batch job that processes a dataset and then exits. The job must run to completion exactly once per execution and should be retried automatically if the container fails. Which Kubernetes workload resource is designed for this requirement?

Which TWO of the following are valid container runtimes that implement the CRI? (Choose two.)

Which component is responsible for managing the lifecycle of containers on a Kubernetes node?

In event-driven architecture, which pattern is commonly used to decouple producers and consumers, allowing asynchronous communication?

Which TWO tools are commonly used for GitOps? (Choose two.)

A developer wants to run a single instance of a Pod on every node in a Kubernetes cluster to collect node-level metrics. Which Kubernetes resource is most appropriate for this task?

Which TWO are benefits of using a service mesh in cloud-native applications?

Which THREE of the following are characteristics of a microservices architecture? (Select 3)

Drag and drop the steps to configure a Kubernetes Service of type LoadBalancer in a cloud environment into the correct order.

You have a Deployment defined with replicas: 5. You run 'kubectl scale deployment myapp --replicas=3'. Which component is responsible for ensuring the actual number of Pods matches the desired 3?

A platform team must ensure that a critical StatefulSet named ledger in the finance namespace always has at least two Pods available during voluntary disruptions such as node drains, and that Pods are spread across different nodes. Which two resources or settings should they configure? (Choose two.)

A team manages a multi-service application with Helm. Each service has its own ConfigMap, Deployment, and Service. The manifests for all services are almost identical except for the image tag and service name. They want to create a single reusable Helm chart that deploys all services from one values file, avoiding duplicate YAML. Which Helm feature should they use to loop over a list of services in the chart templates?

You have a YAML manifest for a Deployment with 'apiVersion: extensions/v1beta1'. When you run 'kubectl apply -f manifest.yaml', you get an error. What is the most likely cause?

A startup is building a cloud-native application and wants to adopt a packaging format that bundles application code and its dependencies into a single immutable artifact that can run consistently across environments. Which technology BEST meets this requirement?

Which TWO of the following are true about Pod resource limits? (Select TWO)

A team wants to deploy a batch job that runs once to process a large dataset. The job should run to completion and then terminate. Which Kubernetes resource should be used?

What is the primary purpose of continuous integration (CI) in a cloud-native application delivery pipeline?

Which TWO of the following are benefits of using Helm for managing Kubernetes applications?

Which of the following is an example of Infrastructure as Code (IaC) tool?

What is the concept of 'immutable infrastructure' as applied to Kubernetes?

Which THREE of the following are true about the Open Container Initiative (OCI)? (Choose 3)

A company wants to run a batch job that processes data and then terminates. Which Kubernetes resource should they use?

When using Kustomize, how do you apply a common label to all resources in the base?

A developer is investigating a performance issue in a microservices application. They want to trace a single request as it flows through multiple services, including a database call. Which OpenTelemetry concept allows them to correlate all these operations under a single logical unit?

A team is adopting cloud-native architecture and wants to ensure that a single failing component does not take down the entire application. They are reviewing the design of their microservices deployment. Which characteristic of cloud-native architecture is MOST directly related to limiting the impact of a component failure?

You need to expose a set of pods running a web application to internal cluster traffic on a stable IP address. Which resource should you create?

A developer deploys a pod that continuously restarts. 'kubectl describe pod' shows the container exits with code 137. What is the most likely cause?

What is the purpose of the 'kubectl scale' command?

Which component of the Kubernetes control plane is responsible for storing the cluster state?

A Kubernetes administrator is troubleshooting a Pod that is stuck in the Pending state. The Pod has a resource request of cpu: 2 and memory: 4Gi. Which two commands are most appropriate to identify why the Pod cannot be scheduled? (Choose two.)

A platform team is deploying a logging stack in Kubernetes. They want to collect logs from all pods and nodes, store them centrally, and provide a query interface. Which combination of tools is commonly used to achieve this?

Which DORA metric measures how quickly code changes are deployed to production?

A Pod is stuck in Pending state. Which of the following is the MOST likely cause?

What is the primary purpose of the Container Runtime Interface (CRI) in Kubernetes?

An administrator runs `kubectl taint nodes node1 dedicated=gpu:NoSchedule` and then creates a Pod with the toleration `key: dedicated, operator: Equal, value: gpu, effect: NoSchedule`. The Pod is scheduled onto node1, but the administrator expected the taint to repel all Pods without a matching toleration. Which statement explains why the Pod was still placed on node1?

Which TWO of the following are benefits of implementing progressive delivery techniques (e.g., canary releases)?

A company uses OpenTelemetry to instrument their microservices. They want to ensure that traces from one service can be correlated with those from another service across network calls. Which OpenTelemetry concept enables this correlation?

Which component is responsible for ensuring that containers are running as specified in a Pod's specification on a node?

What does the 'kubectl logs' command retrieve?

A company is adopting a GitOps workflow for their Kubernetes deployments. They want to ensure that the cluster state always matches the desired state defined in a Git repository. Which tool is specifically designed for this purpose?

A user runs 'kubectl create deployment my-deploy --image=nginx' and then wants to scale the deployment to 5 replicas. Which command should they use?

Which component in Kubernetes is responsible for maintaining the desired state of the cluster?

Which of the following are core components of the Flux GitOps toolkit?

A cluster administrator is configuring a Pod with a container that requires 2 CPU cores and 4Gi of memory. The administrator sets resource requests to 2 CPU and 4Gi memory, and limits to 4 CPU and 8Gi memory. The Pod is scheduled to a node with 4 CPU and 8Gi memory available. What happens when the container attempts to use 3 CPU and 6Gi memory?

A developer wants to store non-confidential configuration data as key-value pairs that can be consumed by Pods as environment variables or mounted files. Which Kubernetes resource is designed for this purpose?

What is the primary purpose of a Kubernetes Service object?

Which TWO of the following are Kubernetes control plane components?

Which tool is commonly used for log aggregation in Kubernetes and is designed to be lightweight?

In the context of the 12-factor app methodology, which factor requires that an app's configuration be stored in environment variables?

Which of the following best describes immutable infrastructure?

A CI/CD pipeline includes image scanning. What is the primary security benefit of scanning container images in the CI phase?

Which THREE are benefits of using container orchestration platforms like Kubernetes?

You are a platform engineer at a fast-growing startup. The company runs a Kubernetes cluster with 50 worker nodes for its production microservices. Recently, the operations team has been struggling with manual configuration drift: developers SSH into nodes to install debugging tools, and some nodes have different kernel parameters or installed packages. This has caused intermittent outages when a pod is scheduled onto a non-standard node. The CTO wants a solution that ensures each node is identical, immutable, and reproducible. The cluster uses kubeadm for bootstrapping and runs on AWS EC2. Which approach best achieves the goal of immutable nodes?

Which Kubernetes resource is commonly used to implement the sidecar pattern for injecting a service mesh proxy?

Which TWO of the following are functions of the kube-controller-manager?

Which component runs on every worker node and is responsible for maintaining the lifecycle of pods?

A pod is in 'Pending' state for a long time. What is the most likely cause?

In event-driven architecture, which component is responsible for decoupling event producers from consumers?

Which THREE are common features of progressive delivery?

A cluster administrator is configuring a Pod to use a ConfigMap for environment variables. Which two methods can be used to expose ConfigMap data as environment variables in a container? (Choose two.)

Which TWO statements accurately describe the concept of immutable infrastructure in the context of container orchestration? (Select two.)

Which kubectl command would you use to view the logs of a specific pod?

You want to run a batch job that processes data and then terminates. Which Kubernetes resource is best suited for this workload?

What is a primary benefit of using containers over virtual machines?

What is a key advantage of containers compared to virtual machines?

Which of the following kubectl commands would you use to apply a manifest file and also save it for later updates?

Which command would you use to view the logs of a specific container in a pod?

A company wants to manage its Kubernetes resources using Git as the single source of truth, with automated synchronization. Which approach should they use?

Which TWO are pillars of observability? (Select two.)

A team wants to implement a canary deployment strategy for their Kubernetes application. Which tool is specifically designed for progressive delivery and can be used to automate canary rollouts?

A developer wants to deploy a stateful application that requires stable network identities and persistent storage per pod instance. Which Kubernetes resource is most appropriate?

What is the primary purpose of a service mesh in a cloud-native architecture?

A developer creates a Pod with a single container that writes logs to stdout. The Pod is running, but the developer wants to view the last 50 lines of logs from that container and have the command keep streaming new output. Which kubectl command accomplishes this?

A team is adopting a GitOps workflow with Argo CD to manage Kubernetes applications. They want to ensure that the cluster state always matches the desired state in Git and that changes are automatically applied. Which two Argo CD features should they configure? (Choose two.)

Which Kubernetes object provides stable network endpoints and load balancing for a set of pods?

In Flux CD, which component is responsible for reconciling the cluster state with the source of truth defined in a Git repository?

Which TWO of the following are examples of Infrastructure as Code (IaC) tools? (Choose two.)

Which open-source project provides a unified standard for collecting and exporting telemetry data (metrics, logs, and traces) from applications?

Which command is used to create a Deployment that runs an nginx container with 3 replicas?

A team wants to minimize downtime during a Deployment rollout. Which strategy ensures that new pods are created before old pods are terminated?

What is a key benefit of container orchestration platforms like Kubernetes?

Which THREE of the following are valid use cases for distributed tracing in a microservices architecture?

What is a key benefit of using containers over virtual machines for application deployment?

Which THREE of the following are resiliency patterns commonly used in cloud native applications? (Choose three.)

Which kubectl command is used to apply a manifest file to create or update resources?

A CI pipeline builds a container image and tags it as 'myapp:latest'. The pipeline then pushes the image to a registry. A Kubernetes Deployment manifest references 'myapp:latest' with imagePullPolicy: Always. After a new image is pushed with the same tag, the team notices that existing Pods are not updated. What is the most likely reason?

Which CNCF project provides a graduated service mesh implementation that includes features like traffic management, security, and observability?

A user creates a Pod with a PersistentVolumeClaim (PVC) that requests 5Gi of storage. The cluster has two PersistentVolumes (PVs): PV1 (3Gi, AccessModes: ReadWriteOnce) and PV2 (10Gi, AccessModes: ReadOnlyMany). The PVC specifies storageClassName: "" and AccessModes: ReadWriteOnce. Which PV will bind to the PVC?

Which component is responsible for running containers on a Kubernetes node?

Which command is used to view the logs of a pod named 'web-pod'?

In a serverless architecture using Knative, what happens to a service that has not received traffic for an extended period?

You are writing a Deployment YAML (apps/v1) for a stateless web application. The application should have 3 replicas and use rolling updates with maxSurge=1 and maxUnavailable=0. Which field should you set under spec.strategy?

What does SLA stand for in the context of service reliability?

An administrator needs to store a database password for a Pod to consume as an environment variable. The password must be stored securely and not exposed in the Pod specification. Which Kubernetes resource should the administrator create?

An application running in a Kubernetes cluster needs to securely access a third-party API. The API key must be stored in the cluster and mounted into the Pod as an environment variable. Which is the best practice?

Which THREE of the following are true about Kubernetes labels and selectors?

You need to run a batch job that processes data every hour and exits upon completion. Which Kubernetes resource should you use?

Which THREE of the following are features typically provided by a service mesh? (Choose three.)

An administrator needs to ensure that Pods from two different Deployments cannot communicate with each other. Which Kubernetes resource should be used?

Which Kubernetes object provides a stable IP address and DNS name to access a set of pods, and can perform load balancing?

A team is implementing a multi-cloud strategy to avoid vendor lock-in. Which Kubernetes feature is most helpful for abstracting the underlying cloud provider?

A cluster administrator needs to run a log-forwarding agent on every node, including nodes added later, without manually scheduling a Pod per node. Which workload object should be used?

A DevOps team wants to adopt a deployment pattern where a new version of an application is gradually rolled out to a small subset of users before full deployment. Which progressive delivery technique should they use?

Which TWO of the following are best practices for structuring log output in cloud-native applications to maximize observability?

A retail company runs its e-commerce platform on Kubernetes. During a flash sale, the application experiences high latency. The team notices that the database pods are CPU-bound and the application pods are waiting on database responses. Which architectural change would best address this bottleneck?

An administrator wants to allow a Pod to consume a ConfigMap named app-config as environment variables, but only the keys DB_HOST and DB_PORT. The ConfigMap contains additional keys. Which Pod spec snippet correctly injects only those two keys as environment variables?

A pod is stuck in 'Pending' state. 'kubectl describe pod' shows '0/4 nodes are available: 4 node(s) had taint {node.kubernetes.io/unreachable: }, that the pod didn't tolerate.' What is the most likely cause?

Which Kubernetes object should you use to store non-sensitive configuration data that can be consumed by Pods as environment variables or mounted files?

A developer wants to view the logs of a specific container named 'sidecar' inside a pod named 'app-pod'. Which command should they use?

A pod is stuck in the 'Pending' state. Which command would you use to get more details about why the pod cannot be scheduled?

A pod is stuck in 'Pending' state. Which of the following is a likely cause?

A Deployment named 'web-app' is configured with replicas: 3. You update the container image. Which Kubernetes object directly manages the pods during the rolling update?

Which kubectl command is used to see the logs of a container in a pod?

Which of the following is true about Kubernetes Namespaces?

A platform team is designing a progressive delivery rollout for a new version of a service running on Kubernetes. They want to send a small percentage of live traffic to the new version, observe metrics, and automatically roll back if error rates rise. Which two components are required to implement this with a service mesh? (Choose two.)

Which TWO of the following are examples of Infrastructure as Code (IaC) tools? (Choose 2.)

A platform engineer is troubleshooting a Pod that stays in the Pending phase. Which two conditions can legitimately cause a Pod to remain Pending? (Choose two.)

Which of the following is used to logically isolate resources within a Kubernetes cluster?

Which THREE of the following are valid ways to pass configuration data to a container in a pod? (Select 3)

A user creates a Deployment with 'replicas: 3'. After applying the manifest, only 2 pods are running. What is the most likely cause?

You want to deploy a stateless web application that should maintain 5 running instances at all times. You need to support rolling updates and rollbacks. Which Kubernetes resource is most appropriate?

Which TWO statements about Namespaces are correct?

Which TWO of the following statements about Kubernetes Deployments are correct? (Select 2)

Which TWO are valid reasons to use a Namespace in Kubernetes?

Which command correctly creates a Deployment named 'web-app' with the image 'nginx:1.21' and 3 replicas?

A team wants to deploy a serverless function that scales to zero when not in use. Which CNCF project is specifically designed for this purpose?

A platform engineer is configuring an OpenTelemetry Collector pipeline. They want to ensure that sensitive data such as credit card numbers is not exported to the observability backend. Which component of the Collector should they use to modify or drop attributes before export?

A DevOps team uses Helm to manage Kubernetes applications. They want to ensure that sensitive data (e.g., database passwords) is not stored in plaintext in the Helm chart or in the cluster's ConfigMaps/Secrets. Which TWO practices should they adopt? (Choose two.)

Which TWO components are part of the Kubernetes control plane? (Choose two.)

Which of the following describes the Open Container Initiative (OCI) image specification?

A developer creates a Deployment with 3 replicas. After updating the pod template, they run 'kubectl rollout status deployment/my-deployment' and see that the rollout is stuck. Which command should they use to investigate the rollout history?

You need to create a ConfigMap from a file named 'app.properties'. Which kubectl command should you use?

Which component of the control plane is responsible for persisting the entire cluster state?

Which TWO of the following are principles of the 12-factor app? (Choose two.)

Which TWO statements about Docker Compose and Kubernetes are correct?

What is the primary purpose of Kubernetes?

In event-driven architecture, what is the role of an event broker?

An administrator notices that a pod in a Deployment is stuck in CrashLoopBackOff. The pod logs show 'Error: failed to start container: exec: "app": executable file not found in $PATH'. What is the most likely cause?

Which TWO of the following are benefits of using a service mesh? (Choose two.)

An administrator is configuring a NetworkPolicy to allow ingress traffic to Pods with label `role=db` only from Pods with label `role=api` on TCP port 6379. The NetworkPolicy is applied in the same namespace as the Pods. Which NetworkPolicy YAML correctly implements this requirement?

An organization wants to manage infrastructure using code to ensure consistent and repeatable deployments across multiple cloud providers. Which tool is MOST suitable for this multi-cloud Infrastructure as Code approach?

A user reports that a web application is not accessible via its Service. The Service is of type ClusterIP. Which TWO steps should be taken to troubleshoot?

You have a Namespace 'team-a' and you want to see all Pods in that namespace, including those that are not ready. Which command should you use?

A team deploys a microservice that requires sticky sessions. The service runs on Kubernetes with multiple replicas. Which Kubernetes resource should be used to ensure requests from a client are consistently routed to the same pod?

You create a Deployment with replicas: 3. You then scale the Deployment to 5 replicas. What is the order of operations that the Deployment controller follows?

Which Kubernetes control plane component acts as the entry point for all administrative tasks and provides the REST API?

A startup is building a cloud-native application and wants to ensure that its services can be discovered and communicated with dynamically as they scale up and down. Which CNCF project provides a distributed key-value store that is commonly used for service discovery and configuration management in Kubernetes?

You need to provide configuration data as environment variables to a pod, but the data is not sensitive. Which object should you use?

An engineering team runs a Kubernetes cluster and wants to ensure that a critical payment service continues to function during a partial network partition between two availability zones. The service currently depends on a single external authentication API in one zone. Which architectural change BEST supports the goal of maintaining payment processing during the partition?

You have a Deployment that must run exactly one replica on each node in the cluster for logging purposes. Which Kubernetes resource should you use?

A developer wants to run a single instance of a stateless web application in a Kubernetes cluster. The application does not need to maintain state or have a stable network identity. Which workload resource is the most appropriate to use?

What is the purpose of a Service in Kubernetes?

A development team is designing a new microservices application to run on a Kubernetes cluster. They want to ensure that each microservice can be developed, deployed, and scaled independently. Which cloud native architecture principle are they primarily applying?

You have a Kubernetes cluster with multiple nodes. You need to ensure that a pod runs on a node that has an SSD. How should you achieve this?

A cluster administrator needs to schedule a pod that requires 4 CPU cores and 16Gi of memory on a node with sufficient resources. The pod also must tolerate a taint on a dedicated node. Which combination of pod spec fields must be set to ensure the pod lands on the correct node?

Which THREE are key characteristics of event-driven architecture? (Choose three.)

A cluster administrator needs to run a node-level log-shipping agent on every node, including nodes added later, and wants the agent to tolerate the control-plane taint. Which workload API object is the most appropriate choice?

A team wants every microservice to ship its logs and metrics to a central backend, and they want to avoid running a separate agent container inside each application Pod. Which cloud native approach BEST fits this requirement while keeping collection decoupled from the application?

A team wants to implement GitOps for their Kubernetes workloads using Argo CD. They have multiple environments (dev, staging, prod) in separate clusters. What is the best practice for structuring the Git repository?

Which Kubernetes resource can be used to assign a pod to a specific node?

Which TWO of the following correctly describe the difference between Docker Compose and Kubernetes? (Choose 2)

The exhibit shows a Deployment manifest for a frontend service. After deployment, the pods are running but the service reports that no endpoints are available. What is the most likely cause?

Which THREE of the following are true about the Container Runtime Interface (CRI)? (Choose 3)

An administrator wants to ensure that a pod only runs on nodes that have a specific GPU. Which mechanism should be used to achieve this?

Which two statements correctly describe etcd in a Kubernetes cluster?

Which Kubernetes resource is best suited for running a batch processing job that must complete successfully exactly once?

A company is evaluating cloud-native observability practices for its Kubernetes-based microservices. Which TWO practices are essential for achieving effective observability? (Choose two.)

You have a web application that needs to read configuration from a file and also access a database password. Which combination of resources should you use to manage these configurations securely?

You have a Deployment defined with replicas: 3. You run 'kubectl scale deployment my-deployment --replicas=5'. What happens?

Which of the following is the smallest deployable unit in Kubernetes?

Which TWO of the following are true about the Open Container Initiative (OCI)?

Which API version is correct for a Deployment in modern Kubernetes (v1.29+)?

Which component of an API gateway pattern is responsible for routing requests to the appropriate microservice based on the request path?

Which TWO of the following are principles of the 12-factor app methodology? (Choose two.)

An administrator runs 'kubectl get pods' and sees that a pod is in 'Pending' state. 'kubectl describe pod' shows the event: '0/4 nodes are available: 1 node had taints that the pod didn't tolerate, 3 nodes had insufficient memory'. What is the most likely issue?

What is the primary purpose of the `kubectl apply` command?

Which of the following is a key difference between a service mesh and an API gateway?

Which THREE statements about Kubernetes Namespaces are correct?

You are asked to schedule a pod on a node that has SSD storage. Which mechanism should you use to achieve this?

A developer creates a Pod with two containers. The first container writes logs every 30 seconds to a shared volume. The second container reads those logs. After deployment, the second container fails to start because it cannot find the log file. The Pod spec uses an emptyDir volume mounted at /var/logs in both containers. What is the most likely cause?

Which of the following is an example of immutable infrastructure?

A platform engineer wants to restrict a Pod so that it runs only on nodes that have the label disktype=ssd. The engineer adds a nodeSelector field to the Pod specification. Which statement best describes the effect of nodeSelector in this scenario?

A Kubernetes cluster runs a critical application in a pod. The operations team wants to receive an alert if the application's main process stops responding to HTTP requests on port 8080 at path /healthz. They need Kubernetes to automatically restart the pod if the health check fails. Which type of probe should they configure?

Which TWO of the following are responsibilities of the kube-controller-manager? (Select 2)

A pod is in the 'Pending' state. Which of the following is a likely cause?

A development team wants to implement GitOps for their Kubernetes deployments using ArgoCD. Which ArgoCD component is responsible for monitoring the Git repository for changes and syncing the desired state to the cluster?

A team runs a stateless API as a Deployment with six replicas across three nodes. They need a stable virtual IP and DNS name that load-balances TCP traffic to the ready replicas from other Pods in the same cluster. Which resource should they create?

You need to store a database password securely and make it available to a Pod as an environment variable. Which Kubernetes resource should you create?

A release manager asks how a GitOps controller such as Argo CD decides whether an application is in sync. Which statement accurately describes that behavior?

Which kubectl command would you use to view detailed information about a pod named 'web-pod' in the 'default' namespace?

Which of the following best describes the GitOps pattern?

Which Kubernetes control plane component is the entry point for all REST API requests?

Which TWO of the following are benefits of using a multi-cloud strategy? (Select TWO.)

A pod is stuck in Pending state. Which of the following is the MOST likely reason?

A company is running a microservices application on a Kubernetes cluster. They have noticed that one of the services, 'payment-api', is experiencing intermittent high latency. The team wants to identify the root cause without modifying the application code. Which approach should they take?

A platform engineer is designing a multi-tenant cluster. They want to ensure that a specific team's workloads can only be scheduled onto nodes labeled `team=blue`, and that workloads from other teams cannot be scheduled there. The team's Pods should not run on any other nodes. Which combination of Kubernetes features should the engineer use to enforce this?

A developer needs to update a running Deployment's container image from 'nginx:1.21' to 'nginx:1.23' with minimal downtime and the ability to roll back if the new version fails. Which kubectl command should be used?

Which Kubernetes control plane component is responsible for maintaining the desired state of the cluster by running controllers?

Which TWO statements accurately describe Kubernetes scheduling?

Which component is responsible for ensuring that the containers in a pod are running as specified?

Which of the following is a key difference between containers and virtual machines?

A Kubernetes cluster has a Deployment running three replicas of an application. You need to update the container image to a new version with zero downtime. Which approach is most appropriate?

Which of the following is a way to provide configuration data to a pod without baking it into the container image?

Which THREE of the following are components of the OpenTelemetry project? (Select three)

A cluster administrator needs to grant a CI/CD service account permission to create and delete Pods only within the staging namespace, while denying access in all other namespaces. Which Kubernetes authorization mechanism should be used?

Which TWO of the following are correct about the 'kubectl apply' command compared to 'kubectl create'? (Select exactly two.)

What is the purpose of the Container Runtime Interface (CRI)?

Which TWO of the following are responsibilities of the kubelet? (Select 2)

A user reports that they cannot connect to a Service from within the cluster. The Service is of type ClusterIP. Running 'kubectl get endpoints service-name' shows no endpoints. What is the most likely cause?

A DevOps engineer is designing a Kubernetes architecture for a stateful application that requires stable network identities and persistent storage across pod rescheduling. The engineer needs to choose the appropriate Kubernetes resource types to meet these requirements. Which two resources should the engineer use? (Choose two.)

A team runs a Kubernetes cluster with Prometheus scraping application metrics. They want Prometheus to automatically discover new pods and scrape their metrics endpoints as pods are created and destroyed. Which Kubernetes resource should they configure Prometheus to use for this dynamic discovery?

Which TWO of the following are examples of context propagation mechanisms used in distributed tracing?

Which TWO of the following are valid Prometheus metric types? (Select two)

You need to store a database password securely and expose it to a Pod as an environment variable. Which Kubernetes resource should you use?

A developer needs to deploy a stateless application with three replicas and ensure that updates are rolled out with zero downtime. Which Kubernetes resource is most appropriate?

A developer runs `kubectl create configmap app-config --from-literal=LOG_LEVEL=debug` and then creates a Pod that references this ConfigMap as a volume. After the ConfigMap is updated with `kubectl edit configmap app-config` to change LOG_LEVEL to info, the application inside the running Pod still reads LOG_LEVEL=debug. What is the most likely reason?

Which TWO of the following are valid Prometheus metric types? (Select two.)

Which two statements about Pods are true? (Select TWO)

A team uses Argo CD to manage a production cluster. A developer commits a change to the Git repository that declares a Deployment with three replicas, but someone later manually scales the Deployment to five replicas using kubectl. What does Argo CD report and do by default?

A developer creates a Pod with a single container that writes logs to stdout. The Pod is scheduled and running, but the developer needs to view the logs from the past hour. Which kubectl command should the developer use?

Which kubectl command would you use to view the detailed state of a pod named 'web-pod' in the 'default' namespace?

A developer creates a pod that needs to securely access a database password stored in the cluster. Which Kubernetes resource should be used to inject the password as an environment variable?

Which Kubernetes resource can be used to define network policies that control traffic between pods?

You have a Deployment named 'web-app' with 3 replicas. You need to scale it to 5 replicas. Which kubectl command should you use?

Which tool is used to manage infrastructure as code and can provision resources across multiple cloud providers?

A company is adopting a multi-cloud strategy to avoid vendor lock-in. Which pattern BEST supports deploying applications across different cloud providers with minimal changes?

Your application consists of a frontend and a backend. The frontend needs to communicate with the backend using a stable DNS name. The backend is deployed as a Deployment with 3 replicas. Which Kubernetes resource should you create to provide a stable DNS name for the backend?

Which THREE of the following are DORA metrics?

Which TWO of the following are responsibilities of the kubelet on a worker node?

A Pod is in 'CrashLoopBackOff' state. You run 'kubectl logs <pod>' and see an error that the application cannot bind to port 8080 because the port is already in use. What is the most likely cause?

You have a pod that needs to securely access a database password. Which Kubernetes resource should you use to store the password?

Which three of the following are true about etcd in Kubernetes?

What is the difference between a liveness probe and a readiness probe?

Which TWO statements about Kubernetes Services are correct?

What is the function of kube-proxy on a worker node?

Which TWO statements about containers compared to virtual machines are correct? (Select 2)

A DevOps engineer notices that after a Helm upgrade, the new pods are crash looping with 'ImagePullBackOff'. What is the most likely cause?

Which component of the metrics-server provides resource metrics like CPU and memory usage?

You have a microservices application where Service A needs to discover the IP of Service B. Both services run in the same Kubernetes cluster. Which approach is the most Kubernetes-native way for Service A to reach Service B?

A CI pipeline scans container images for vulnerabilities. The scan report shows a critical vulnerability in a base image layer. What is the most efficient way to remediate this issue?

A pod has resource requests set to 'cpu: 500m' and 'memory: 256Mi'. The node has 2 CPU cores and 4Gi memory. How many pods with the same resource requests can be scheduled on that node, assuming no other pods?

You need to securely store a database password for use by a Pod. Which Kubernetes resource should you use?

A platform team needs to ensure that a critical StatefulSet pod always runs on a specific node that has local NVMe storage. The node is labeled `disktype=nvme`. Which Kubernetes scheduling mechanism should they use to guarantee this placement?

Which TWO of the following are characteristics of a Namespace in Kubernetes?

A pod in the 'default' namespace cannot reach a pod in the 'backend' namespace by service name 'db-service'. Both namespaces exist and the service is running. What is the most likely cause?

A team wants to deploy a workload that must run on every node in a Kubernetes cluster, including new nodes added later. Which resource type should they use?

A team is building a serverless application using Knative. They want the application to scale to zero when idle. Which Knative resource type should they use?

A pod in the 'default' namespace has the following YAML snippet: securityContext: runAsUser: 1000 runAsGroup: 3000 fsGroup: 2000 What is the effect of the fsGroup field?

Which of the following is a primary goal of the Cloud Native Computing Foundation (CNCF)?

Which tool is specifically designed for distributed tracing and was originally developed by Uber?

In a GitOps workflow, a team uses ArgoCD. A developer manually changes a Deployment's replica count in the cluster via kubectl. ArgoCD has self-healing enabled. What will happen?

You are designing a microservices application that requires each service to be independently deployable and scalable. The services communicate over HTTP and need service discovery. Which orchestration feature BEST addresses the need for service discovery?

A developer needs to inject configuration data into a pod as environment variables and also mount a configuration file into a volume. The data should be decoupled from the pod specification and easily updatable without rebuilding the container image. Which Kubernetes resource should be used?

Which TWO of the following are valid ways to assign a pod to a specific node?

What is the primary role of the OpenTelemetry Collector?

What is the purpose of container image scanning in a CI/CD pipeline?

You run 'kubectl logs my-pod' and see: "Error from server (BadRequest): container "my-container" in pod "my-pod" is waiting to start: PodInitializing". What does this mean?

An operations team wants a workload that runs exactly one Pod on every node in the cluster, including nodes added later, typically for log forwarding and node monitoring. Which Kubernetes workload resource is designed for this?

Which of the following is NOT a responsibility of the kubelet on a worker node?

A team is designing a Kubernetes observability stack and wants to use Prometheus for metrics. They need to understand how Prometheus collects and stores time series data. Which TWO of the following statements accurately describe Prometheus? (Choose two.)

A user creates a Service of type ClusterIP with a selector matching pods labeled 'app: myapp'. However, a pod named 'myapp-pod' with label 'app: myapp' is not receiving traffic. What is a possible reason?

Which TWO of the following are core principles of cloud native architecture? (Choose two.)

What is the role of kube-scheduler in Kubernetes?

A Pod has a container that needs to write logs to a file. The administrator wants the logs to persist even if the container restarts. What is the simplest solution?

A developer deploys a pod with the following resource specification: ```yaml resources: requests: memory: "256Mi" limits: memory: "512Mi" ``` The pod is killed with OOMKilled. What is the most likely cause?

A Kubernetes operator wants to view real-time CPU and memory usage of pods and nodes in a cluster using kubectl top. Which component must be installed and running in the cluster for this command to work?

Which Kubernetes control plane component is the primary entry point for all administrative tasks and serves the Kubernetes API?

A developer inspects a Pod and sees that it is stuck in the Pending phase. Which two conditions can legitimately cause a Pod to remain Pending? (Choose two.)

You create a Service of type ClusterIP with the name 'my-service' in the 'default' namespace. What DNS name resolves to the service's cluster IP from a pod in the same namespace?

A Kubernetes administrator needs to restrict inbound traffic to a set of pods. Only pods with the label 'app: frontend' in the same namespace should be allowed to reach the pods on TCP port 8080. Which resource should be used?

Which THREE of the following are correct statements about Kubernetes Deployments?

Which component in a service mesh is responsible for collecting telemetry data and enforcing traffic policies?

Which of the following best describes the 12-factor app methodology's approach to configuration?

An application Pod in the `web` namespace must read a configuration value stored in a ConfigMap named `app-config` without restarting when the value changes. The value is consumed as a file inside the container. Which approach meets this requirement?

According to DORA metrics, which metric measures the percentage of deployments that fail in production?

A platform engineer is designing a multi-tenant cluster and must ensure that Pods in different namespaces cannot communicate with each other by default, while allowing specific traffic within each namespace. Which two Kubernetes features are required to achieve this? (Choose two.)

Which THREE of the following are benefits of using a service mesh in a cloud native architecture?

Which component of the Kubernetes control plane stores the cluster state?

Which Kubernetes control plane component is responsible for storing the cluster state and configuration data?

Which TWO of the following are responsibilities of the kube-controller-manager?

Which TWO of the following are common characteristics of serverless computing? (Choose two.)

A Deployment is configured with 'replicas: 4' and 'strategy.type: RollingUpdate'. You update the container image. What behavior does the Deployment exhibit?

A company defines an SLO that 99.9% of requests to a service should complete in under 200ms. Which metric type is used to measure this SLO?

Your application requires persistent storage that must be available across pod restarts and rescheduling. What is the recommended approach?

A DevOps team wants to collect and forward logs from all nodes in a Kubernetes cluster to a centralized logging backend. Which component is specifically designed for lightweight log collection and forwarding?

You want to update a Deployment's container image to v2 and perform a rolling update using the simplest imperative command. Which kubectl command achieves this?

A Service of type ClusterIP is created to expose a set of pods. How does the Service achieve load balancing to the pods?

A team is deploying a new microservice that processes sensitive user data. They want to ensure that secrets such as database passwords are not exposed in the container image or environment variables. Which approach should they use?

Which two of the following are Kubernetes controllers that run inside the kube-controller-manager? (Select TWO)

A pod is in CrashLoopBackOff. You check the logs and see 'Error: container process not found'. What is the most likely cause?