Courseiva
Container OrchestrationhardMultiple ChoiceObjective-mapped

KCNA Container Orchestration Practice Question

Which of the following best describes immutable infrastructure?

⚠ Common exam trap

Test-takers frequently confuse immutable infrastructure with specific deployment patterns (blue/green) or security features (read-only filesystems), rather than recognizing the core principle of replacement over modification.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Infrastructure components that are replaced rather than changed after deployment

Immutable infrastructure is a pattern where components (servers, containers, etc.) are never modified after deployment. Instead, any change requires building a new instance from a golden image or template and replacing the old one. This eliminates configuration drift and ensures consistency, which is a core principle in container orchestration with tools like Kubernetes, where Pods are replaced rather than patched in place.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Servers that are updated in-place with configuration management tools

    Why it's wrong here

    In-place updates are the opposite of immutable infrastructure.

  • Infrastructure that is version-controlled and deployed using blue/green deployments

    Why it's wrong here

    This is a related practice but not the core definition.

  • Infrastructure components that are replaced rather than changed after deployment

    Why this is correct

    Immutable infrastructure replaces components instead of modifying them.

  • Infrastructure that uses only read-only file systems

    Why it's wrong here

    Read-only file systems are a security measure but not the definition of immutable infrastructure.

About these practice questions

One of 833 original KCNA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This KCNA practice question is part of Courseiva's free CNCF certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the KCNA exam.