KCNA Kubernetes Fundamentals Practice Question
Which Kubernetes control plane component is the entry point for all REST API requests?
⚠ Common exam trap
Some may mistakenly think etcd is the entry point because it stores all cluster data, but the apiserver is the only component that directly interfaces with etcd and exposes the Kubernetes API.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
kube-apiserver
The kube-apiserver is the front-end of the Kubernetes control plane and the sole entry point for all REST API requests. It validates and processes API calls (e.g., via kubectl, client libraries, or internal components) before persisting state to etcd or triggering other controllers. No other component directly exposes an API endpoint for external or internal management operations.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
kube-controller-manager
Why it's wrong here
kube-controller-manager runs control loops that reconcile cluster state toward the desired state, watching resources via the API server. It is tempting as a core control plane component, but it consumes the API rather than exposing it, so it cannot be the entry point for REST requests.
- ✓
kube-apiserver
Why this is correct
The kube-apiserver exposes the Kubernetes REST API and is the sole entry point through which all clients, including kubectl and internal components, submit requests. This satisfies the stem's requirement for the control plane's API entry point.
- ✗
kube-scheduler
Why it's wrong here
kube-scheduler watches for newly created Pods with no assigned node and binds them to suitable nodes; it does not serve client requests. It is tempting because it is a control plane component that communicates with the API server, but it acts as a client of the API rather than its entry point.
- ✗
etcd
Why it's wrong here
etcd is the consistent key-value store holding all cluster state; the API server reads from and writes to it, but clients never query etcd directly. It is tempting because every REST request ultimately touches etcd, yet etcd sits behind the API server rather than accepting requests itself.
Go deeper
Related to this question
About these practice questions
One of 930 original KCNA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This KCNA practice question is part of Courseiva's free CNCF certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the KCNA exam.