CKA Dumps CKA Braindumps
CKA Real Questions CKA Practice Test CKA Actual Questions
killexams.com
Certified Kubernetes Administrator 2025
https://killexams.com/pass4sure/exam-detail/CKA
afana metheus entd
ico er: B
nation: Prometheus is widely used for monitoring and alerting in Kubernetes environments, ing metrics and providing a robust query language.
------ service provides a way to route external traffic to services within a Kubernetes cluster.
sterIP dePort adBalancer ress
er: D
nation: An Ingress resource is used to manage external access to services, typically HTTP, w netes cluster.
Gr
Pro
Flu
Cal Answ
Expla collect
The --
Clu
No
Lo
Ing Answ
Expla ithin a
Kuber
You need to define a Role that allows a user to create and delete ConfigMaps in the development namespace. What YAML snippet would you use?
apiVersion: rbac.authorization.k8s.io/v1kind: Rolemetadata:name: configmap-editornamespace: developmentrules:apiGroups: ["*"]resources: ["configmaps"]verbs: ["create", "delete"]
apiVersion: rbac.authorization.k8s.io/v1kind: Rolemetadata:name: configmap-editornamespace: developmentrules:apiGroups: [""]resources: ["configmaps"]verbs: ["create", "delete"]
apiVersion: rbac.authorization.k8s.io/v1 kind: Role
metadata:
name: configmap-editor namespace: development rules:
apiGroups: [""]
resources: ["*"]
verbs: ["create", "delete"]
apiVersion: rbac.authorization.k8s.io/v1 kind: Role
metadata:
pace: development
oups: ["configmaps"] ces: ["configmaps"] "create", "delete"]
er: B
nation: This YAML configuration correctly defines a Role that allows creating and deleting gMaps in the development namespace.
ant to ensure that a Pod can only be scheduled on nodes with a specific resource available. What should you use?
source Limits ource Requests de Affinity
de Selector er: B
nation: Resource Requests specify the minimum amount of resources required for the Pod, ncing the scheduler to place it on a suitable node.
rules: apiGr resour verbs: [
Answ Expla
Confi
Re
Res
No
No
Answ Expla
influe
You are troubleshooting a secret that is not being correctly injected into a pod. What command would you use to check the secret's details?
Both A and B
kubectl describe secret <secret-name>
kubectl logs <pod-name>
kubectl get secret <secret-name> -o yaml
Answer: A
Explanation: Both commands provide detailed information about the secret, helping to diagnose issues with its injection into the pod.
You have a multi-node Kubernetes cluster and need to ensure that all kubelet services are running correctly. What command would you use to check the status of the kubelet service on a node?
kubectl get nodes
rnalctl -u kubelet
bectl describe node <node-name> er: B
nation: The command systemctl status kubelet checks the status of the kubelet service directl de, providing insights into whether it is active and any errors that may have occurred.
re configuring a dynamic provisioning for a storage class. Which parameter would you set to the disk type for an AWS EBS volume?
umeType kType rageType
er: B
nation: The volumeType parameter specifies the type of AWS EBS volume to be provisioned o1).
ant to ensure that your control plane nodes are highly available. Which configuration should
jou
ku Answ
Expla y on
the no
You a specify
type
vol
dis
sto Answ
Expla (e.g.,
gp2, i
You w you
implement?
Deploy a single control plane node with a static IP
Deploy multiple control plane nodes with an etcd cluster
Use an external etcd cluster
Use a single-node etcd instance Answer: B
Explanation: For high availability, you should deploy multiple control plane nodes along with a
distributed etcd cluster to prevent a single point of failure.
To achieve high availability for the controller manager, you decide to run multiple instances. What must you ensure about the API server in this configuration?
It must be run on a single node only.
It must support leader election among the controller managers.
No changes are needed for the API server.
er: B
nation: When running multiple instances of the controller manager, it is crucial to enable lea election to ensure that only one instance actively manages the cluster at any given time.
eed to ensure that your Kubernetes nodes can be automatically updated with the latest securit
s. Which feature should you consider?
de Auto-Scaling ster Autoscaler
nual Node Management naged Kubernetes Services
er: D
nation: Managed Kubernetes services often include automated updates for security patches, e re kept up to date without manual intervention.
eed to upgrade a Kubernetes cluster from version 1.20 to 1.22. What is the recommended up
grade to 1.21 first, then to 1.22. grade directly to 1.22.
It must be configured to replicate its state across nodes. Answ
Expla der
You n y
patche
No
Clu
Ma
Ma
Answ
Expla nsuring
nodes a
You n grade
path?
Up
Up
Upgrade to the latest patch of 1.20, then to 1.22.
Upgrade to 1.19 first, then to 1.21. Answer: A
Explanation: Kubernetes requires upgrades to be performed sequentially between minor versions. Thus, you must upgrade to 1.21 before proceeding to 1.22.
In a scenario where you need to configure Kubernetes with multiple etcd clusters for disaster recovery,
which of the following configurations would be ideal?
All etcd clusters in the same data center.
etcd clusters running on the same node as the API server.
etcd clusters located in different geographical regions.
A single etcd cluster with read replicas in different zones. Answer: C
eed to set up a cluster with a specific API server advertising address. What parameter should hen initializing the cluster with kubeadm?
dvertise-address=<ip> piserver-override=<ip> dvertise-ip=<ip>
nd-address=<ip> er: A
nation: The --advertise-address parameter specifies the IP address that the kube-apiserver will ise to the other nodes in the cluster.
ant to ensure that a pod cannot be scheduled on nodes with the label env=production. Which uration should you use?
deSelector: roduction
rations:- key: envoperator: Equalvalue: production
You n you
use w
--a
--a
--a
--bi Answ
Expla advert
You w config
no env: p
tole
taints:
- key: env
value: production effect: NoSchedule
nodeAffinity:requiredDuringSchedulingIgnoredDuringExecution:nodeSelectorTerms:- matchExpressions:- key: envoperator: NotInvalues:- production
Answer: D
Explanation: Using NotIn in matchExpressions for node affinity prevents the pod from being scheduled on nodes labeled with env=production.
What is the significance of the restartPolicy field in a Pod specification?
It determines how many replicas to run.
It defines the resource limits for the Pod.
It specifies the node on which the Pod should run.
er: D
nation: The restartPolicy field controls the behavior of the Pod when it fails, determining wh be restarted or not.
re configuring a Kubernetes cluster with kubeadm and need to ensure that the API server can high availability. What is the minimum number of API server instances you must deploy?
er: C
nation: To achieve high availability, you should deploy at least three instances of the API ser ng quorum can be maintained in etcd.
command would you use to view the permissions associated with a specific Role in a name bectl describe role <role-name> -n <namespace>
Expla ether it
should
You a handle
1
2
3
5
Answ
Expla ver,
ensuri
Which space?
ku
kubectl get role <role-name> -n <namespace>
Both A and C
kubectl auth can-i --list --as <user> -n <namespace> Answer: C
Explanation: Both commands provide insights into the permissions defined in a Role and how they relate to a specific user.
You suspect a resource leak in your cluster. What command can you use to assess resource usage across all namespaces?
kubectl top pods --all-namespaces
kubectl get all --all-namespaces
kubectl describe nodes
kubectl get resourcequotas --all-namespaces Answer: A
nation: The kubectl top pods --all-namespaces command provides metrics about resource usa elping to identify potential leaks.
re investigating a memory leak in a pod. What command would you use to check the resourc f all containers in that pod?
bectl get pod <pod-name> -o jsonpath='{.status.containerStatuses[*].usage}' ectl top pod <pod-name>
ectl describe pod <pod-name> bectl logs <pod-name>
er: B
nation: The kubectl top pod command provides real-time metrics on CPU and memory usage ecified pod's containers.
is expected to communicate with a service that uses a headless configuration. Which comm you use to verify the endpoints of the service named my-headless-service in the default names
bectl get endpoints my-headless-service -n default ectl get service my-headless-service -n default
pods, h
You a e
usage o
ku
kub
kub
ku Answ
Expla for
the sp
A pod and
can pace?
ku
kub
kubectl describe service my-headless-service -n default
kubectl logs my-headless-service -n default Answer: A
Explanation: The kubectl get endpoints command retrieves the endpoints associated with the headless service, showing the actual pod IPs that are part of the service.
What command would you use to check the status of etcd in your Kubernetes cluster?
etcdctl endpoint health
kubectl get pods -n kube-system
kubectl logs -n kube-system etcd-<node-name>
Both A and C Answer: D
_______ is responsible for managing the lifecycle of pods and ensuring the desired state is a ubernetes cluster.
belet
e-proxy server
er: A
nation: The kubelet manages the lifecycle of pods on a node and communicates with the API ort status.
eed to expose a service internally within the cluster using a ClusterIP service. What YAML tly defines this service for a deployment named my-app?
Version: v1kind: Servicemetadata:name: my-appspec:type: ClusterIPselector:app: my- rts:port: 8080targetPort: 80
Version: v1 ervice
The _ chieved
in a K
ku
kub
API
etcd Answ
Expla server
to rep
You n snippet
correc
api apppo
api kind: S metadata:
name: my-app spec:
type: NodePort selector:
app: my-app ports:
port: 80
targetPort: 8080
apiVersion: v1
kind: Service metadata: name: my-app spec:
type: LoadBalancer selector:
app: my-app ports:
port: 80
targetPort: 8080
rts:port: 80targetPort: 8080 er: D
nation: This YAML snippet correctly defines a ClusterIP service that routes traffic from port get port 8080 of the pods labeled app=my-app.
the blank: The ________ component is responsible for ensuring that the state of the cluster es the desired state defined in the deployment specifications.
er: Controller Manager
nation: The Controller Manager continuously monitors and adjusts the state of the cluster to sired state defined in deployments.
the blank: To ensure that your etcd cluster can recover from failures, you should regularly b etcd data using the command ________.
er: etcdctl snapshot save
apiVersion: v1kind: Servicemetadata:name: my-appspec:type: ClusterIPselector:app: my- apppo
Answ
Expla 80 to
the tar
Fill in match
Answ
Expla match
the de
Fill in ack up
the Answ
Explanation: The etcdctl snapshot save command is used to create backups of the etcd data, which can be restored in case of failures.
Question: 501
A Kubernetes worker node, named wk8s-node-0 is in state NotReady. Investigate why this is the case, and perform any appropriate steps to bring the node to a Ready state, ensuring that any changes are made permanent.
You can ssh to the failed node using: [[email protected]] $ | ssh Wk8s-node-0
Question: 502
CORRECT TEXT
Create a pod as follows:
Name: non-persistent-redis container Image: redis
Volume with name: cache-control Mount path: /data/redis
The pod should launch in the staging namespace and the volume must not be persistent.