KCNA Kubernetes Fundamentals Practice Question
Which resource provides stable network endpoints to a set of pods, regardless of pod IP changes?
⚠ Common exam trap
A common trap is confusing a Service's stable network endpoint role with a Deployment's pod lifecycle management role, leading candidates to incorrectly choose Deployment.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Service
A Service provides a stable virtual IP and DNS name that remains constant even as pods are created, destroyed, or rescheduled. It uses label selectors to dynamically route traffic to the backing pods, abstracting away their individual IP changes. This is the core mechanism for reliable network endpoints in Kubernetes.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
ConfigMap
Why it's wrong here
ConfigMap stores non-confidential configuration as key-value pairs for injection into pods; it holds no network identity or endpoint information. It is tempting because pods reference it, but it would be correct for supplying configuration data, not for giving a changing pod set a stable address.
- ✓
Service
Why this is correct
A Service assigns a stable virtual IP and DNS name, load-balancing traffic to backing pods selected by labels. This satisfies the stable-endpoint requirement, since pod IPs change on recreation, whereas the Service's ClusterIP persists for the Service's lifetime.
- ✗
Deployment
Why it's wrong here
A Deployment manages ReplicaSet rollout and scaling of stateless pods; it neither allocates a cluster IP nor tracks endpoint membership. It is tempting because it owns the pods, but it would be correct for declarative updates and scaling, not for presenting a stable network endpoint.
- ✗
Ingress
Why it's wrong here
Ingress routes external HTTP and HTTPS traffic to services by hostname or path; it does not assign a stable virtual IP to a pod set. It is tempting because it fronts services, but it would be correct when exposing HTTP routes rather than providing a persistent cluster-internal endpoint.
Go deeper
Related to this question
About these practice questions
One of 930 original KCNA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This KCNA practice question is part of Courseiva's free CNCF certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the KCNA exam.