KCNA Container Orchestration Practice Question
Which THREE of the following are core principles of immutable infrastructure? (Choose 3)
⚠ Common exam trap
KCNA often tests the misconception that 'updating config files on running servers' or 'patching in place' is compatible with immutability — candidates must recognize that any in-place modification violates the principle.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Rollbacks are performed by redeploying a previous image
Option A is correct because in immutable infrastructure you never repair a running instance; to roll back you simply redeploy the previously built and validated image (e.g., a prior AMI, container image tag, or VM template), which restores the known-good state deterministically. Option C is correct because the defining rule of immutability is that once an instance or component is deployed it is never modified in place — no SSH patching, no config edits — so any change requires replacing it with a new artifact. Option D is correct because immutable patterns rely on versioned, codified artifacts (e.g., Packer-built images, IaC templates, container registries) so that the same build produces identical, reproducible deployments across environments. Option B is not correct because patching running servers is the mutable, in-place model that immutable infrastructure explicitly rejects. Option E is not correct because editing configuration files on running instances is also an in-place mutation, whereas immutable practice bakes configuration into a new image and redeploys it.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Rollbacks are performed by redeploying a previous image
Why this is correct
Because servers are never patched in place, reverting means destroying the current instances and launching fresh ones from the previously validated image. This satisfies the stem's rollback principle: recovery is a redeployment of an artefact, not an in-place repair of running infrastructure.
- ✗
Infrastructure is patched by applying updates to running servers
Why it's wrong here
Patching running servers mutates existing instances in place, which is precisely what immutable infrastructure forbids; replacements are provisioned from a new image instead. It is tempting because patching is a genuine operational need, and this approach is correct for mutable, long-lived server estates managed through configuration management.
- ✓
Infrastructure components are never modified after deployment
Why this is correct
Servers are treated as disposable; changes require building a new image and replacing instances rather than patching live systems. This is the defining constraint of immutable infrastructure in the stem, eliminating configuration drift and making every deployed artefact identical to its tested source.
- ✓
Deployments are reproducible and consistent
Why this is correct
Immutable artifacts ensure the same image runs everywhere.
- ✗
All changes are made by updating configuration files on running instances
Why it's wrong here
Editing configuration on live instances changes their state after provisioning, contradicting immutability, where every change ships as a freshly built image. It is tempting because configuration files are a legitimate change vehicle, and this is the right approach for mutable fleets where in-place updates are acceptable.
Go deeper
Related to this question
About these practice questions
Courseiva writes every KCNA question from scratch — 930 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official CNCF exam blueprint
This KCNA practice question is part of Courseiva's free CNCF certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the KCNA exam.