KCNA kube-apiserver Practice Question
What is the primary purpose of the Kubernetes control plane component 'kube-apiserver'?
⚠ Common exam trap
A common misconception is that the kube-apiserver stores cluster state, when in fact it only mediates access to etcd, which is the actual persistent store.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Expose the Kubernetes REST API and act as the entry point for all administrative tasks
The kube-apiserver is the front-end of the Kubernetes control plane, exposing the Kubernetes REST API. It validates and processes all administrative requests (e.g., creating pods, scaling deployments) and is the only component that directly interacts with the etcd datastore. This makes it the central entry point for all cluster management tasks, aligning with option D. Other options are incorrect: A describes the kubelet, B describes the kube-scheduler, and C describes etcd.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Run container runtime operations on nodes
Why it's wrong here
Container runtime operations run on worker nodes via kubelet and the CRI, not on the control plane. The apiserver's role is to authenticate, authorise and serve API requests. It is tempting because the apiserver coordinates node actions, but it never executes containers itself.
- ✗
Schedule pods onto nodes
Why it's wrong here
Pod placement is performed by kube-scheduler, which watches for unscheduled pods and binds them to nodes. The apiserver only records that binding. It is tempting because scheduling requests flow through the API, but the apiserver performs no node-selection logic.
- ✗
Store cluster state and configuration
Why it's wrong here
Storing cluster state is etcd's role; kube-apiserver validates and processes REST requests, exposing the API that reads and writes that state. It is tempting because the apiserver is the only component clients talk to, so it appears to hold configuration, but persistence belongs to etcd.
- ✓
Expose the Kubernetes REST API and act as the entry point for all administrative tasks
Why this is correct
kube-apiserver exposes the Kubernetes REST API, making it the sole entry point for administrative tasks: every kubectl command, controller and scheduler request flows through it for authentication, authorisation and admission before persisting state to etcd. This satisfies the stem's requirement for the control plane's central API gateway role.
Go deeper
Related to this question
About these practice questions
Courseiva writes every KCNA question from scratch — 930 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This KCNA practice question is part of Courseiva's free CNCF certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the KCNA exam.