Courseiva
Kubernetes FundamentalsmediumMultiple ChoiceObjective-mapped

KCNA Kubernetes Fundamentals Practice Question

What is the function of kube-proxy on a worker node?

⚠ Common exam trap

A common misconception is that kube-proxy handles pod lifecycle or node health reporting, when in fact those are kubelet responsibilities. Candidates often confuse the 'proxy' name with general node management.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

It implements part of the Kubernetes Service concept by managing network rules

kube-proxy runs on each worker node and is responsible for implementing the Kubernetes Service abstraction by managing network rules (e.g., iptables, IPVS, or userspace mode). It watches the API server for Service and EndpointSlice changes and configures local packet filtering or forwarding rules to route traffic to the correct backend pods, enabling load balancing and service discovery.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • It ensures the desired number of pods are running

    Why it's wrong here

    That is the job of the ReplicaSet controller, part of kube-controller-manager.

  • It runs the container runtime

    Why it's wrong here

    Container runtime (e.g., containerd) runs containers, not kube-proxy.

  • It reports node status to the control plane

    Why it's wrong here

    kubelet reports node status; kube-proxy focuses on networking.

  • It implements part of the Kubernetes Service concept by managing network rules

    Why this is correct

    kube-proxy handles IP tables/IPVS rules for service load balancing.

Go deeper

Related to this question

About these practice questions

One of 833 original KCNA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

Same concept, more angles

1 more way this is tested on KCNA

These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.

Variation 1. What is the purpose of kube-proxy on a worker node?

medium
  • A.To run the container runtime
  • B.To store cluster configuration data
  • C.To implement network rules and handle service traffic routing
  • D.To monitor pod health and restart unhealthy containers

Why C: Kube-proxy is the component responsible for implementing network rules on each worker node, enabling service abstraction by managing IP tables or IPVS rules to route traffic to the appropriate pods. It handles service discovery and load balancing for ClusterIP, NodePort, and LoadBalancer service types, ensuring that traffic destined for a service is correctly forwarded to healthy pod endpoints.

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This KCNA practice question is part of Courseiva's free CNCF certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the KCNA exam.