Kubernetes Certified Network Administrator (KCNA) Part 2 Practice Test

These questions are part of the practice quiz. Start practicing

• In Kubernetes, what event triggers the kube-scheduler to assign a Pod to a specific node?
• In telemetry, which entity is primarily used to record and analyse the path that a request takes through various services in a distributed system?
• Which practice is enabled by Infrastructure as Code in terms of reproducibility?
• Which statement accurately describes the Open Container Initiative (OCI) standard?
• In a Kubernetes cluster, which component is responsible for routing traffic for services and managing IP rules?
• What is a primary responsibility of an SRE in terms of system reliability?
• Grafana is commonly used with Prometheus for what purpose?
• What is the primary purpose of Pod Disruption Budgets in Kubernetes?
• In Kubernetes, which authorization mode is known for offering detailed control over what specific actions can be performed on different resources within the cluster?
• Which term best describes storage that is created for a Pod and is not intended to outlive the Pod's lifecycle?
• Which of the following groupings exclusively consists of valid Kubernetes container restart policies?
• Which tool is specifically designed as a comprehensive service mesh to control, secure, and observe microservices, including advanced traffic management features?
• What is the primary function of the kubectl top command in Kubernetes?
• Which Kubernetes component is responsible for managing cloud provider integrations and control plane interactions?
• Which architectural pattern in cloud computing allows you to build and run applications and services without managing infrastructure, typically billed based on usage rather than pre-allocated capacity?
• In cloud native environments, which persona primarily focuses on optimizing cloud costs and financial management?
• OIDC is used for what capabilities?
• Which command applies the configurations from a manifest.yaml file to create or update resources in a Kubernetes cluster?
• In Kubernetes, when would you typically use a sidecar pattern with containers in a Pod?
• Which layer of a software architecture is primarily targeted by OpenTracing and OpenTelemetry for monitoring and observability?
• Which product is built using the GitOps Toolkit, a set of composable APIs and specialised tools for building GitOps-based continuous delivery systems?
• Which of the following are valid restart policies for containers in Kubernetes?
• What is the primary purpose of the Container Runtime Interface (CRI) in Kubernetes?
• What are the three pillars of observability in a software system?
• Primary function of Security Profiles PSP and Kyverno.
• In a Kubernetes cluster, what is the primary role of etcd?
• Which of the following options lists the default namespaces in a standard Kubernetes installation?
• Which Kubernetes component interacts with the Container Runtime Interface (CRI)?
• Which term describes automatically increasing or decreasing the number of pod replicas based on demand?
• Which Kubernetes object is used to schedule periodic tasks?
• In Kubernetes, when using Secrets to store sensitive data, how is the data stored within the Secret by default?
• What is the primary purpose of policy-as-code in Kubernetes through a tool like Open Policy Agent?
• Which Kubernetes-native tool is designed to orchestrate and manage complex parallel workflows and batch jobs?
• In Kubernetes, the Manual Reclamation Policy for Persistent Volume Claims (PVCs) is typically recognized as which of the following?
• What is the primary purpose of a Kubernetes Service?
• Which lightweight container runtime is designed specifically for Kubernetes and adheres to the CRI?
• What does IaC stand for in the context of cloud computing and DevOps?
• Which statement best describes the role of kube-state-metrics?
• In the context of Kubernetes, what is a 'Sidecar' container?
• In Kubernetes, what is a service called when it is created without a ClusterIP?
• Which of the following is a valid semantic versioning example?
• In a Kubernetes environment, which software is widely used as a lightweight proxy to handle the traffic management between microservices?
• Which Kubernetes resource is used to ensure stable network identity and storage for stateful apps?
• On the same node, how do pods communicate with each other?
• Which kubectl command is used to view the logs of a terminated container in a multi-container pod?
• Which Linux feature is used by Kubernetes to isolate containers and limit the resource usage of a process or set of processes?
• In Kubernetes configuration files and manifests, Services and Pods are typically represented as which type of object?
• In the CI/CD pipeline, what does "Integration" in Continuous Integration (CI) particularly emphasise?
• Which term describes a mechanism that enables services to locate each other and communicate over the network within a cluster?
• Which Kubernetes feature automatically scales the number of pods in a deployment or replica set based on observed CPU utilization or other selected metrics?
• How does the Container Network Interface (CNI) relate to Network Policies in Kubernetes?
• Which tool exposes metrics describing the state of Kubernetes objects, such as pods and deployments, for monitoring?
• Within Kubernetes, a Service provides what essential function?
• Which component on a Kubernetes node directly runs containers?
• In a Kubernetes cluster, which component runs on every node to manage the lifecycle of containers?
• In a cloud-native environment, which persona is typically responsible for the creation and execution of an incident management procedure?
• Which autoscaling solution can scale workloads down to zero pods in Kubernetes?
• Which runtime is commonly cited as the reference implementation of the OCI runtime specification?
• What is the most appropriate use case for a headless service in Kubernetes?
• In Kubernetes, how do Network Policies behave when multiple policies are applied to the same set of pods?
• What option aligns to the 'traditional' workflow of a CI/CD pipeline, where 'D' in CI/CD stands for Deployment?
• Which of the following best describes a headless service in Kubernetes?
• Default for --authorization-mode if --authorization-config not provided.
• In Prometheus, which metric type represents a value that can arbitrarily go up or down, like temperature or memory usage?
• Which Kubernetes resource is used to dynamically adjust the resource requests and limits of containers within Pods?
• Docker multistage build technique reduces final image size.
• What is Helm in Kubernetes?
• Which Kubernetes-native tool is used to define and run complex batch jobs and workflows, enabling parallel execution and dependencies?
• In Kubernetes, what is an Endpoint primarily used to represent?
• Which statement best describes the RollingUpdate strategy in Kubernetes Deployments?
• What is the primary function of the Kubelet in a Kubernetes cluster?
• What are common components found in a service mesh implementation?
• To achieve consistent DNS naming for StatefulSet pods, what resource should you use?
• Which of the following describes the data store used by Kubernetes to hold configuration and cluster state?
• In IT operations, the acronym SRE stands for which term?
• In Kubernetes, which component is primarily responsible for managing a Node?
• In etcd used in Kubernetes, what is the significance of the 1.5MB size limit for an individual value stored in etcd?
• Which kubectl command lists all API resources available in a Kubernetes cluster?
• Smallest unit of compute you can define and manage.
• Which Kubernetes feature is crucial for managing distributed stateful applications to avoid conflicts like 'split-brain' scenarios?
• In Kubernetes, how do you request and attach persistent storage to a Pod?
• Which Kubernetes distribution is known for its minimal resource requirements and ease of installation, particularly well-suited for IoT and edge computing environments?
• In Kubernetes, what primary benefit is achieved by implementing NetworkPolicy resources?
• In OCI, which areas are standardized?
• In the Open Container Initiative (OCI) Specification, which areas are standardised?
• Which lightweight container runtime is designed specifically for Kubernetes and conforms to the Container Runtime Interface (CRI)?
• Which statement about Init Containers is true?
• Which GitOps-based continuous delivery tool is built using the GitOps Toolkit?
• In cloud-native environments, which persona is typically responsible for managing Service Level Agreements (SLAs), Service Level Indicators (SLIs), and Service Level Objectives (SLOs)?
• In Kubernetes, which security-focused tool is commonly used for runtime security monitoring and detection of anomalous activities within containers and pods?
• In a cloud-native organization, which role is primarily responsible for building and maintaining the underlying platform infrastructure, enabling application developers to deploy and run their services efficiently?
• Which resource is used to expose a stable network endpoint for a dynamic set of Pods?
• What is a Dockerfile in the context of containerization?
• OIDC stands for OpenID Connect.
• In cloud computing, which approach is best suited for simultaneously managing security threats and optimising costs by identifying unusual activities?
• What is a sidecar container?
• Ceph is an open-source storage platform that provides which combination of storage interfaces?
• Which Kubernetes component is primarily responsible for routing service traffic and managing IP rules?
• Which component automatically adjusts the number of nodes in a Kubernetes cluster based on workload demands?
• Which resource enables data sharing between cronjobs running at various times in Kubernetes?
• Which of the following is a correct example of semantic versioning formatting?
• Which cloud-native tools enable Kubernetes clusters to be automatically synchronised with Git repositories?
• For how long is the Kubernetes API guaranteed to be backward compatible following a release?
• KEDA uses a particular Custom Resource Definition for configuring autoscaling based on external metrics. What is the name of this resource?
• What are the primary modes of service discovery within a Kubernetes cluster?
• Which of the following lists all four types of Kubernetes Services?
• In the context of Kubernetes, which component is responsible for running containers on each node in the cluster?
• In the context of Kubernetes, which component on a node is responsible for running containers as specified in the Pod definitions?
• What is the purpose of a PersistentVolumeClaim in Kubernetes?
• What does the nodeSelector field in a PodSpec use to place Pods on specific nodes?
• Which statement describes CronJob in Kubernetes?
• How is a headless service created in Kubernetes?
• Which description best defines Ephemeral Storage for a Pod in Kubernetes?
• What is the correct order in the 4C's framework for Cloud Native Security?
• Which Kubernetes object is most suitable for deploying stateless applications?
• Which statement is true about Ingress in Kubernetes in relation to the routing of traffic?
• What is the primary purpose of KubeScape in Kubernetes security?
• Which of the following is not a default Kubernetes namespace?
• Which Kubernetes service type is NOT considered a standard service type?
• Which feature allows categorisation and organisation of resources to help manage costs?
• In a service mesh, which two planes are commonly identified?
• To monitor the progress of a deployment rollout in Kubernetes, which kubectl command should you use?
• What is the primary purpose of an Init Container in Kubernetes?
• Which practice automates building, testing, and deployment to ensure consistent delivery?
• For rolling out scalable, stateless workloads in Kubernetes, which object is most commonly used?
• Which Kubernetes component runs on each node to manage the containers and communicate with the control plane?
• Which Kubernetes object provides a stable internal IP for service discovery within the cluster?
• Which framework is recognised as the standardised interface specification for service meshes?
• Which Kubernetes concept enables grouping and selecting resources for management tasks and cost tracking?
• What is the primary purpose of the kubectl explain command?
• Pod Disruption Budgets are used to ensure what during voluntary disruptions?
• In a Pod, which Linux namespace do containers usually share?
• What is the primary purpose of kube-state-metrics in a Kubernetes cluster?
• Which Kubernetes component is part of node infrastructure rather than the control plane?
• Which Kubernetes resource enables data sharing across multiple Pods or CronJobs?
• Which two Kubernetes resources are used to expose applications to external traffic, including options like ClusterIP, NodePort, and LoadBalancer?
• In a managed Kubernetes service, which component handles cloud provider integration for resources like LoadBalancer?
• What does CNCF stand for in the context of cloud-native computing?
• Which statement best describes Pod Disruption Budgets?
• Which two resources are commonly used together to expose applications to external traffic, including type options like ClusterIP, NodePort, and LoadBalancer?
• Omitting the USER directive in a Dockerfile can lead to which security risk?
• In a Kubernetes cluster architecture, which component acts as the central management entity, processing RESTful requests to manage and control the various resources within the cluster?
• How are the container specifications in Deployments and StatefulSets similar in Kubernetes?
• Which option with the kubectl logs command is used to fetch logs from a previously terminated container?
• During the phase when container images are being downloaded for a Pod in Kubernetes, what state is the Pod typically in?
• Which statement about ephemeral storage in Kubernetes is true?
• What are CloudEvents in cloud computing?
• Which service mesh is noted for simplicity and ease of use in Kubernetes?
• What is a potential drawback of kubectl apply related to tracking resource state?
• In Kubernetes, what does Service Discovery refer to?
• Which is a use case for combining Init Containers with Persistent Volume Claims (PVCs)?
• Which Kubernetes resources support immutable: true to prevent changes after creation?
• The ServiceMeshInterface (SMI) specification provides what kind of abstraction for service meshes?
• Which statement best describes the role of a Kubernetes Service in networking?
• Which open-source storage platform provides integrated block, file, and object storage for distributed environments?
• Which statement best describes vertical scaling of an application?
• Which open-source tool is specifically designed for assessing the security posture of Kubernetes clusters according to NSA and CISA guidelines?
• Which two resources can be made immutable to prevent changes after creation?
• What is the default update strategy used by Kubernetes Deployments for rolling out updates?
• Which technology is incompatible with the Kubernetes Container Runtime Interface (CRI)?
• Which Pod phase is typically observed when a Pod's image is being downloaded?
• When a Pod is created in Kubernetes without specifying a Service Account, which default Service Account is used?
• Which distribution is especially suitable for edge environments due to low resource requirements?
• Which Kubernetes resource should you use to provide persistent data storage for an application?
• Which software is widely used in Kubernetes environments for cloud-native storage orchestration?
• Which statement best describes RollingUpdate in Kubernetes Deployments?
• Which component is commonly used as a lightweight proxy for inter-service traffic in Kubernetes?
• In a managed public cloud Kubernetes service, which component is most closely associated with issues like a LoadBalancer being stuck in a pending state?
• Which sequence correctly represents the hierarchical workflow of components in a Kubernetes environment?
• Who is responsible for the governance and operation of hosted projects under the Cloud Native Computing Foundation (CNCF)?
• Function associated with Kubernetes Security Contexts.
• Which resource is used to run scheduled tasks in Kubernetes?
• In Kubernetes, which term describes an auxiliary container that runs with the main container to perform auxiliary tasks?
• Within Cloud Native Computing Foundation groups, how are conflicts typically resolved?
• What happens when applying a manifest with kubectl apply if the resource already exists?
• Which kubectl command runs a command in an existing container?
• Which two container runtimes are recognized for providing enhanced security features, such as stronger isolation through virtualization?
• What does the kubectl explain command provide?
• Which organizational body within CNCF provides technical oversight for hosted projects?
• What resource is created by the kubectl expose command?
• What is particularly beneficial for automating the building, testing, and deployment of software applications, ensuring consistent and efficient delivery processes?
• If a new node is added to the cluster, what does a properly configured DaemonSet do?
• Which component on a node is primarily responsible for running containers as specified in Pod definitions?
• Which Service Mesh implementation is designed specifically for Kubernetes, known for its simplicity and ease of use?
• Headless Service with StatefulSets role.
• In Kubernetes, what are Service Endpoints primarily used for?
• In Kubernetes, what is the Open Policy Agent (OPA) used for?
• What is the general behavior of Kubernetes Deployment's default update strategy during updates?
• Which runtime security monitoring tool is widely used in Kubernetes for detecting anomalous container activities?
• What best describes Ephemeral Storage in Kubernetes?
• The cloud-native architecture centered around microservices proves to be a strong system that ensures what key quality in software systems?
• What tool is commonly used for installing and managing applications in a Kubernetes cluster?
• Which component schedules Pods to Nodes in Kubernetes?
• In terms of security best practices for containerization, why is it considered a bad practice to omit the USER directive in a Dockerfile?
• Which policy framework can be used with Kubernetes to validate requests and enforce policies?
• Which Kubernetes object is designed for stateful workloads requiring stable network identities and persistent storage for each pod?
• What term describes the end-to-end journey of a request across services in a distributed system?
• Which tool is specifically designed for monitoring and managing costs in a Kubernetes environment, providing insights into spending and resource optimisation?
• In the context of Kubernetes projects, what does SIG stand for?
• Which Kubernetes resource is used to manage the deployment and lifecycle of stateful workloads?
• Which component runs on each node and handles networking rules for pods?
• Which component on a Kubernetes node is primarily responsible for ensuring that containers are running as defined in the Pod specifications?
• In Kubernetes architecture, which component is considered the "source of truth" for all cluster state and configuration?
• Which open standard provides a specification for container images and runtimes, ensuring consistency and compatibility in the container ecosystem?
• Difference between Security Contexts and Security Policies in terms of scope.
• Which object is recommended for managing jobs that need to run multiple times according to a batch process?
• What Kubernetes resource provides a stable entry point and can load balance across a set of pods?
• How many types of services are there in Kubernetes?
• As a Site Reliability Engineer (SRE), which task would typically fall under your purview, especially in the context of ensuring system reliability?
• Which tool is widely used for automating building, testing, and deploying applications in CI/CD pipelines?
• In etcd, what does the 1.5 MB limit refer to?
• Which container runtimes are recognized for providing enhanced security features such as stronger isolation through virtualization?
• Pod Disruption Budgets (PDBs) were introduced to protect against voluntary disruptions. What is their primary function?
• AlwaysAllow default authorization mode effect?
• What is the purpose of a Persistent Volume in Kubernetes?
• Which core capability is commonly provided by a service mesh in a cloud-native environment?
• How does KEDA enable event-driven autoscaling in Kubernetes, and which custom resource does it use for this purpose?
• Which of the following is a component of the Kubernetes Control Plane?
• What is the reference implementation of the OCI runtime specification?
• In Kubernetes, what is the primary use of the Open Policy Agent (OPA)?
• Which Kubernetes resource ensures that an instance of a pod runs on every node in the cluster?
• Which tool is typically used in combination with Prometheus to visualise and analyse data?
• In Kubernetes, which object represents the endpoints backing a Service?
• Which Kubernetes component is responsible for exposing applications running on a set of Pods as a network service?
• Which statement best describes the relationship between Deployments and ReplicaSets in Kubernetes?