XK0-006 Automation, Orchestration, and Scripting Practice Question
Which Kubernetes resource is used to store non-sensitive configuration data as key-value pairs that can be consumed by pods?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
ConfigMap
ConfigMaps are used for non-sensitive configuration data. Secrets are for sensitive data like passwords. Deployments manage replicas of pods. Namespaces isolate resources.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Deployment
Why it's wrong here
A Deployment manages replicated pod lifecycle and rollout state, holding no configuration data for consumption. It tempts because Deployments reference ConfigMaps in their pod templates, so configuration appears in Deployment YAML, but the key-value store itself is a separate resource.
- ✗
Secret
Why it's wrong here
A Secret stores sensitive data such as credentials and tokens, not non-sensitive configuration. It tempts because Secrets share ConfigMaps' key-value consumption pattern via environment variables and volume mounts, making it the correct choice when the data requires confidentiality.
- ✗
Namespace
Why it's wrong here
A Namespace partitions cluster resources for isolation, naming and quota scoping, and stores no key-value configuration. It tempts because Namespaces commonly appear alongside ConfigMaps in manifests, and teams use them to separate configuration per environment.
- ✓
ConfigMap
Why this is correct
ConfigMaps hold non-sensitive configuration as key-value pairs, decoupling configuration from pod images. Pods consume them via environment variables, command-line arguments, or mounted volumes. Sensitive data belongs in Secrets instead, which store base64-encoded values and support encryption at rest.
Go deeper
Related to this question
About these practice questions
This XK0-006 question is part of Courseiva's 781-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This XK0-006 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the XK0-006 exam.