KCNA Kubernetes Fundamentals Practice Question
Which Kubernetes object is used to store non-sensitive configuration data that can be consumed by pods?
⚠ Common exam trap
Kubernetes often tests the distinction between ConfigMap and Secret, trapping candidates who assume all configuration data must be stored in Secrets, ignoring that ConfigMap is the correct choice for non-sensitive data.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
ConfigMap
ConfigMap is the correct Kubernetes object for storing non-sensitive configuration data, such as environment variables, command-line arguments, or configuration files, that can be consumed by pods. Unlike Secrets, ConfigMaps store data in plaintext and are designed for configuration that does not require encryption, making them ideal for application settings that are not confidential.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Secret
Why it's wrong here
Secrets store sensitive values such as passwords, tokens and keys, with base64-encoded data and restricted access; the question specifies non-sensitive configuration. A Secret would be the correct choice when the data requires confidentiality, not for ordinary settings.
- ✗
ServiceAccount
Why it's wrong here
ServiceAccounts supply an identity for pods to authenticate to the Kubernetes API, not configuration data. A ServiceAccount is the correct choice when a pod must call the API server with scoped permissions, not when supplying application settings.
- ✓
ConfigMap
Why this is correct
A ConfigMap holds non-confidential key-value configuration data that Pods consume as environment variables, command-line arguments or mounted files. This satisfies the stem's requirement for storing non-sensitive configuration, distinguishing it from Secrets, which are intended for sensitive data such as credentials.
- ✗
PersistentVolume
Why it's wrong here
PersistentVolume provides durable block or file storage to pods, not configuration key-value data, so it cannot satisfy this requirement. It is tempting because both are cluster resources mounted into containers, and a PersistentVolume would be the right choice when a workload needs data to survive pod restarts, such as a database.
Go deeper
Related to this question
About these practice questions
One of 930 original KCNA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This KCNA practice question is part of Courseiva's free CNCF certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the KCNA exam.