KCNA Kubernetes Fundamentals Practice Question
Which of the following is NOT a responsibility of the kubelet on a worker node?
⚠ Common exam trap
Candidates often confuse the kubelet's role with kube-proxy's role, assuming the kubelet handles all networking on the node, including Service traffic routing.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Implementing network rules for Services
The kubelet is the primary node agent that runs on each worker node, responsible for ensuring containers are running in a Pod as specified by the PodSpec. It performs liveness and readiness probes, starts and stops containers, and reports node and pod status to the control plane. Implementing network rules for Services, such as iptables or IPVS rules, is the responsibility of the kube-proxy, not the kubelet.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Performing liveness and readiness probes
Why it's wrong here
Executing liveness and readiness probes is a core kubelet duty: it runs the configured checks against containers and restarts or removes them from endpoints accordingly. This is genuinely the kubelet's job, so it is not the correct answer to a NOT question.
- ✗
Starting and stopping containers based on PodSpecs
Why it's wrong here
Starting and stopping containers from PodSpecs is exactly what the kubelet does: it watches the API server and drives the container runtime to match the desired state. This is a genuine kubelet duty, so it cannot be the responsibility that is NOT the kubelet's.
- ✓
Implementing network rules for Services
Why this is correct
Service network rules are implemented by kube-proxy, which programs iptables or IPVS rules on each node. The kubelet instead manages Pod lifecycle, volumes, and container runtime interaction, so network rule implementation falls outside its responsibilities.
- ✗
Reporting node and pod status to the control plane
Why it's wrong here
The kubelet continuously reports node and pod status back to the control plane through the API server, which the scheduler and controllers rely on. This is a real kubelet responsibility, so it cannot be the duty that is NOT the kubelet's.
Go deeper
Related to this question
About these practice questions
One of 930 original KCNA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This KCNA practice question is part of Courseiva's free CNCF certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the KCNA exam.