KCNA Flashcards
Which is not a service type in Kubernetes?
A. ClusterIP
B. NodePort
C. Ingress
D. LoadBalancer
E. ExternalName
c. Ingress
What standard does kubelet use to communicate with the container runtime?
A. Service Mesh Interface (SMI)
B. CRI-O
C. ContainerD
D. Container Runtime Interface (CRI)
D. Container Runtime Interface (CRI)
What kind of limitation do cgroups allow? (Select all that apply)
A. Prioritization
B. Resource limiting
C. Accounting
D. None of the options
E. Control
F. Server cpu and memory
A, B, C, E
A. Prioritization
B. Resource limiting
C. Accounting
E. Control
What is the most common way to scale the application in the cloud environment?
A. Parallel Scaling
B. Horizontal Scaling
C. Vertical Scaling
B. Horizontal Scaling
Which of the following is an advantage a cloud-native microservices application has over monolithic
applications?
A. Cloud-native microservices applications tend to be faster and more responsive than monolithic
applications.
B. Cloud-native microservice applications tend to be easier to troubleshoot.
C. Cloud-native microservice applications tend to be easier to scale and perform updates on.
C. Cloud-native microservice applications tend to be easier to scale and perform updates on.
An application that is nearing its usage limit. To increase the amount of users it can handle, you allo-
cate additional memory resources to each instance of the application. What type of scaling is this?
A. Horizontal Scaling
B. Cluster Autoscaling
C. Recursive Scaling
D. Vertical Scaling
D. Vertical Scaling
Which of the following is not the part of Kubernetes Control Plane?
A. kube scheduler
B. etcd (pronounce: esty-d)
C. kube api-server
D. kube-proxy
D. kube-proxy
Which of the following factors does scheduling take into account when selecting a Node?
A. How many replicas there are in a Deployment
B. Services
C. Resource requirements
D. The number of existing Pods on a Node
C. Resource requirements
What is etcd used for in Kubernetes?
A. Integration with cloud platforms
B. Network routing for the cluster
C. Kubernetes API security
D. Backend object storage for the Kubernetes API
D. Backend object storage for the Kubernetes API
What are container runtimes with Kubernetes? (Select all that apply)
A. CRI-O
B. lxd
C. containerd
D. Dockershim
A, C
A. CRI-O
C. containerd
Which Kubernetes resource creates Kubernetes Jobs?
A. JobFactory
B. CronJob
C. Task
D. JobDeployment
B. CronJob
Which of the following are characteristics of Statefulsets?
A. Ordered, graceful deployment and scaling
B. Creates replica sets
C. Uses headless services
A. Ordered, graceful deployment and scaling
What can you use to add new resource types to your cluster?
A. start container
B. CustomResourceDefinitions
C. init container
D. Flux
E. CRI-O
B. CustomResourceDefinitions
What is horizontal scaling?
A. Creating a Deployment
B. Adding resources to existing apps and servers
C. Moving workloads from one server to another
D. Adding additional replicas of apps and servers
D. Adding additional replicas of apps and servers
What kubectl command is used to edit a resource on the server?
A. kubectl resource modify
B. kubectl update resource
C. kubectl edit
D. kubectl resource edit
C. kubectl edit
Which of the following computing model doesn’t require you to provision infrastructure?
A. None of the above
B. Bare Metal
C. Compute Engine
D. Virtual Machines
E. Serverless
E. Serverless
What Kubernetes resource would allow you to run one Pod on some of your Nodes?
A. DaemonSet
B. ClusterSet
C. Deployment
D. ReplicaSet
A. DaemonSet
What cloud-native construct does a kubernetes pod wrap?
A. Container
B. Virtual Machine (VM)
C. side car process
D. Docker image
A. Container
What is the smallest possible unit in Kubernetes to run a container?
A. pod
B. docker
C. service
D. container
A. pod
What command can you use to get documentation about a resource type from the command line?
A. kubectl api-resources
B. kubectl explain
C. kubectl get
D. kubeadm get-resource
B. kubectl explain
Stateful set requires which service for the network identity of pods?
A. Ingress
B. Load Balancer Service
C. Headless Service
C. Headless Service
What Linux feature is used to provide isolation for containers?
A. Processes
B. Services
C. NetworkPolicy
D. Control groups
D. Control groups
What does CNCF stand for?
A. Cloud Native Computing Foundation
B. Cloud Native Cloud Foundation
C. Cloud Native Container Foundation
A. Cloud Native Computing Foundation
Which of the following are not the metrics for Site Reliability Engineering?
A. Service Level Objectives ‘SLO’
B. Service Level Agreements ‘SLA’
C. Service Level Indicators ‘SLI’
D. Service Level Definition ‘SLD’
D. Service Level Definition ‘SLD’
There are three Nodes in a cluster, and you want to run exactly one replica of a Pod on each Node. You prefer
to automatically create a replica on any new Nodes when they are added. Which Kubernetes resource should you use?
A. DaemonSet
B. ReplicaSet
C. NodeSet
D. StatefulSet
E. Deployment
A. DaemonSet
The 4C’s of Cloud Native security
A. Chroot, Compute, Cluster and Container
B. Cluster, Cloud, Compute, and Containers
C. Code, Containers, Compute, and Cloud
D. Cloud, Clusters, Containers, and Code
D. Cloud, Clusters, Containers, and Code
Various Container Orchestrator Systems (COS)? (Select all that apply)
A. Apache Mesos
B. None of the options
C. Docker Swarm
D. Kubernetes
A,C, and D
A. Apache Mesos
C. Docker Swarm
D. Kubernetes
Which is NOT a use case for the Kubernetes dashboard?
A. Troubleshooting any issues with applications
B. Managing running applications
C. Installing new Kubernetes cluster
D. Managing the entire Kubernetes cluster
C. Installing new Kubernetes cluster
Which kubernetes object do deployments use behind the scenes when they need to scale pods?
A. POD
B. Deployment
C. Horizontal pod autoscaler
D. Api Scheduler
E. Replicasets
E. Replicasets
To specify a Kubernetes object which language is used?
A. JSON
B. Go
C. YAML
D. Node
E. Python
C. YAML
Which organizational persona creates Service Level Agreements ‘SLA’, Service Level Objectives ‘SLO’,
and Service Level Indicator ‘SLI’?
A. Developer
B. DevSecOps
C. Site Reliability Engineer (SRE)
D. Security and Compliance Engineer
E. DevOps
C. Site Reliability Engineer (SRE)
A _____ is a ready-to-run software package, containing everything needed to run an application.
A. Container Repository
B. Container Runtime
C. Docker
D. Container Image
D. Container Image
What is autoscaling?
A. Automatically measuring resource usage
B. Automatically assigning workloads to nodes in a cluster
C. Automatically repairing broken application instances
D. Automatically adding or removing compute resources as needed
D. Automatically adding or removing compute resources as needed
Open Container Initiative set container standards for
A. Code, Build, Distribute, Deploy containers
B. Run, build, and image
C. Code, Build, Distribute containers
D. Run, Build, Distribute containers
D. Run, Build, Distribute containers
What are the two major components of service mesh?
A. Control plane and Data plane
B. Master plane and Data plane
C. None of the options
D. Controller plane and User plane
E. Master plane and User plane
A. Control plane and Data plane
What is the command to list all the available objects in your Kubernetes cluster?
A. kubectl get all
B. kubectl get api-resources
C. kubectl api-resources
D. kubectl get pods
C. kubectl api-resources
A new Pod is created. Then, the Pod is assigned to a Node. Which Kubernetes component was re-
sponsible for determining which Node to assign the Pod to?
A. kubelet
B. Scheduler
C. API Server
D. Controller manager
B. Scheduler
Which of the following is not the required field to describe Kubernetes objects?
A. metadata
B. apiVersion
C. Kind
D. Container
E. spec
D. Container
Which access control component of Kubernetes is responsible for authorization and decides what
requestor is allowed to do?
A. Service Account
B. Role-based access control ‘RBAC’
C. Deployment
B. Role-based access control ‘RBAC’
How to create deployment name app-dep, image=nginx, and replicas 5 using imperative command?
A. kubectl create app-dep deployment –image=nginx –replicas=5
B. kubectl create deployment app-dep –image=nginx –replicas=5
C. kubectl create app-dep deployment –replicas=5 –image=nginx
B. kubectl create deployment app-dep –image=nginx –replicas=5
Which of the following container runtime is planned to be deprecated in Kubernetes 1.20 and high-
er?
A. cri-o
B. None of the options
C. docker
D. podman
E. containerd
C. docker
Which style of operations are preferred for K8S and cloud native applications?
A. JSON
B. Declarative
C. Imperative
B. Declarative
Which of the following is NOT a Kubernetes component?
A. Scheduler
B. Docker
C. Cloud Controller manager
D. Kube-proxy
B. Docker
Which part of a Kubernetes cluster is responsible for running container workloads?
A. Worker Node
B. kube-proxy
C. Control plane
E. etcd
A. Worker Node
Which control plane component is responsible for scheduling pods?
A. kube-proxy
B. kube scheduler
C. kubelet
D. kube api-server
B. kube scheduler
What is a benefit of Kubernetes federation? (Select all that apply)
A. Avoids scalability limits on pods and nodes
B. Creates highly available clusters in different regions
C. Low latency
A, B, C
A. Avoids scalability limits on pods and nodes
B. Creates highly available clusters in different regions
C. Low latency
To run a startup task before a Pod’s container starts up. What Kubernetes feature can help you ac-
complish this?
A. Init container
B. Sidecar container
C. Startup probe
D. DaemonSet
A. Init container
Which of the following best describes the way K8S Role-based access control (RBAC) works?
A. K8S does not do RBAC or Cluster role
B. RBAC lists which operations are denied to users
C. States which users can perform which actions against the resources.
C. States which users can perform which actions against the resources.
The Kubernetes API provides an interface for storing objects. Which of the following describes the
type of objects stored by the Kubernetes API?
A. Containers
B. REST
C. YAML
D. ETCD
B. REST
What is the name of the Kubernetes agent that runs on each worker nodes?
A. kubelet
B. systemd
C. kube-proxy
D. pod
A. kubelet