View Full Linux Foundation KCNA Exam Dumps and Practice Test Dumps.

 

Question 361

Which Kubernetes component is responsible for managing the lifecycle of containers on a node through a container runtime?

1. kubelet
2. kube-scheduler
3. kube-apiserver
4. CoreDNS

Correct Answer: 1

Explanation

The kubelet is the primary node agent responsible for ensuring that containers described by assigned Pods are running and healthy. It communicates with the Kubernetes API and works with a container runtime to start, stop, and monitor containers. The kube-scheduler determines where Pods should run, while kube-apiserver provides the central Kubernetes API. CoreDNS provides DNS-based service discovery. The kubelet therefore acts as the important link between the desired workload configuration maintained by Kubernetes and the actual containers running on a worker node.

Question 362

Which container runtime interface allows Kubernetes to communicate with supported container runtimes?

1. CSI
2. CRI
3. CNI
4. RBAC

Correct Answer: 2

Explanation

The Container Runtime Interface, or CRI, defines the interface through which Kubernetes interacts with container runtimes. This abstraction allows Kubernetes to work with supported runtimes without requiring the Kubernetes components to implement every runtime-specific detail themselves. CNI is concerned with container networking, while CSI provides an interface for storage plugins. RBAC controls authorization. CRI is therefore specifically associated with communication between Kubernetes node components and the container runtime responsible for executing containers.

Question 363

Which interface standardizes how Kubernetes networking plugins integrate with the cluster?

1. CSI
2. CRI
3. CNI
4. API

Correct Answer: 3

Explanation

The Container Network Interface, or CNI, provides a standard way for container networking plugins to integrate with Kubernetes and configure networking for workloads. CNI plugins can be responsible for assigning network interfaces and addresses and implementing networking behavior required by the cluster. CRI deals with container runtimes, while CSI handles persistent storage integration. Kubernetes relies on networking implementations to provide the Pod networking model and related connectivity. CNI therefore focuses specifically on networking integration rather than storage or container execution.

Question 364

Which interface is designed to standardize integration between Kubernetes and storage systems?

1. CNI
2. CRI
3. RBAC
4. CSI

Correct Answer: 4

Explanation

The Container Storage Interface, or CSI, provides a standardized interface for integrating storage systems with Kubernetes. CSI drivers can support operations such as provisioning, attaching, mounting, and managing persistent storage depending on the capabilities of the driver. CNI is used for networking, while CRI is used for container runtime integration. RBAC controls access permissions. CSI allows Kubernetes to work with different storage technologies through a common integration model, making persistent storage capabilities more portable and extensible across Kubernetes environments.

Question 365

Which Kubernetes object can be used to store application configuration as key-value data and expose it as environment variables?

1. ConfigMap
2. Service
3. Deployment
4. Namespace

Correct Answer: 1

Explanation

A ConfigMap can store non-sensitive configuration values as key-value data. Pods can consume these values in several ways, including as environment variables or mounted configuration files. This allows configuration to be separated from the container image, making the same application image easier to use across development, testing, and production environments. Services provide networking, Deployments manage application rollouts, and Namespaces provide logical organization. ConfigMaps should not be used for sensitive credentials because Kubernetes Secrets are intended for sensitive configuration data.

Question 366

Which Kubernetes object can expose a Secret value to a container as an environment variable?

1. Service
2. PodDisruptionBudget
3. Pod specification
4. StorageClass

Correct Answer: 3

Explanation

A Pod specification can reference a Kubernetes Secret and expose selected Secret values to containers as environment variables. Secrets can also be mounted as files through volumes. This provides a way for applications to consume sensitive configuration without embedding credentials directly into container images. Services provide network endpoints, PodDisruptionBudgets manage voluntary disruptions, and StorageClasses describe storage provisioning behavior. Appropriate RBAC permissions and security practices remain important because authorized users or workloads may still be able to access Secret data.

Question 367

Which Kubernetes object is commonly used to perform a controlled update from one application version to another?

1. Job
2. Deployment
3. ConfigMap
4. PersistentVolume

Correct Answer: 2

Explanation

A Deployment can manage controlled updates to application Pods, commonly through a rolling update strategy. When the Pod template changes, the Deployment creates a new ReplicaSet and gradually replaces Pods from the previous version according to its update configuration. This can help maintain application availability while a new version is introduced. Jobs are designed for finite tasks, ConfigMaps store configuration, and PersistentVolumes provide storage. Deployments therefore provide an important mechanism for managing application revisions and controlled rollout behavior.

Question 368

Which Deployment strategy replaces old Pods gradually with new Pods?

1. Recreate
2. BlueGreenOnly
3. RollingUpdate
4. ReplaceAll

Correct Answer: 3

Explanation

The RollingUpdate strategy gradually replaces Pods from an older application version with Pods from the new version. Kubernetes can control how many Pods are created above the desired count and how many can be unavailable during the update. This provides a mechanism for changing application versions while maintaining service availability. The Recreate strategy instead removes the old Pods before creating the new version. RollingUpdate is therefore commonly used when an application can support running different versions temporarily during a deployment.

Question 369

Which Deployment setting controls how many additional Pods may be created above the desired replica count during a rolling update?

1. maxSurge
2. maxUnavailable
3. minReadySeconds
4. revisionHistoryLimit

Correct Answer: 1

Explanation

The maxSurge setting controls the maximum number of additional Pods that can be created above the desired number of replicas during a RollingUpdate. For example, a Deployment with ten desired replicas and an appropriate surge value may temporarily run more than ten Pods while the new version is being introduced. maxUnavailable controls how many Pods can be unavailable during the update. minReadySeconds affects how long a newly ready Pod must remain ready, while revisionHistoryLimit controls stored rollout revisions. maxSurge therefore focuses on temporary capacity during updates.

Question 370

Which Deployment setting controls how many Pods may be unavailable during a rolling update?

1. maxSurge
2. maxUnavailable
3. replicas
4. selector

Correct Answer: 2

Explanation

The maxUnavailable setting controls the maximum number or percentage of desired Pods that can be unavailable during a Deployment rolling update. It helps determine how aggressively Kubernetes can replace old Pods with new ones. maxSurge controls additional Pods that may temporarily exist above the desired replica count. The replicas field specifies the desired number of Pods, while selector identifies the Pods managed by the Deployment. Properly configuring maxUnavailable can help balance rollout speed with application availability.

Question 371

Which kubectl command can display the progress of a Deployment rollout?

1. kubectl rollout status
2. kubectl rollout delete
3. kubectl deployment watch
4. kubectl status rollout

Correct Answer: 1

Explanation

The kubectl rollout status command displays the current progress of a Deployment rollout. It can help administrators determine whether newly created Pods are becoming ready and whether the update has completed successfully. This is particularly useful in automated deployment workflows and during manual troubleshooting. Other rollout commands provide different functions, such as viewing history or undoing a revision. Monitoring rollout status helps confirm that Kubernetes has successfully progressed from the previous application version toward the desired new version.

Question 372

Which kubectl command can revert a Deployment to a previous revision?

1. kubectl rollout pause
2. kubectl rollout history
3. kubectl rollout undo
4. kubectl deployment revert

Correct Answer: 3

Explanation

The kubectl rollout undo command can roll a Deployment back to a previous revision. This is useful when a newly deployed application version causes unexpected behavior and an earlier revision needs to be restored. The rollout history command can be used to inspect stored revisions, while pause temporarily stops further rollout progression. Rollback behavior depends on the Deployment’s available revision history. Using rollout undo provides an operational mechanism for returning a Deployment to an earlier configuration without manually recreating the entire workload.

Question 373

Which Kubernetes command displays the rollout revision history of a Deployment?

1. kubectl rollout status
2. kubectl rollout history
3. kubectl get revisions
4. kubectl deployment history

Correct Answer: 2

Explanation

The kubectl rollout history command displays revision information for resources that support Kubernetes rollout history, such as Deployments. It can help administrators inspect previous revisions and understand changes made during application updates. This information can be useful before performing a rollback with kubectl rollout undo. The rollout status command instead reports current rollout progress. The other listed commands are not standard kubectl commands for displaying Deployment revision history. Rollout history is therefore an important tool for tracking and managing application version changes.

Question 374

What is the primary purpose of a Kubernetes admission controller?

1. To execute containers on worker nodes
2. To provide persistent storage
3. To process API requests after authentication and authorization and potentially validate or modify them
4. To assign Pod IP addresses

Correct Answer: 3

Explanation

Admission controllers operate in the Kubernetes API request path after authentication and authorization and before an accepted request is persisted. They can validate requests or modify them according to configured policies. This makes admission control useful for enforcing organizational requirements, applying defaults, or rejecting configurations that violate defined rules. Admission controllers do not execute containers, provide storage, or directly assign Pod IP addresses. They provide an additional policy and validation layer between API requests and resource persistence.

Question 375

Which Kubernetes API concept represents a specific type of object such as a Pod, Service, or Deployment?

1. Resource kind
2. Node label
3. Storage class
4. Runtime socket

Correct Answer: 1

Explanation

The resource kind identifies the type of Kubernetes object being represented. Examples include Pod, Service, Deployment, ConfigMap, and Secret. A manifest commonly includes the kind field together with apiVersion, metadata, and spec. Node labels describe node attributes, StorageClasses describe storage provisioning behavior, and runtime sockets are associated with communication with container runtimes. Understanding resource kinds is important when creating YAML manifests and using kubectl because commands and fields often depend on the type of Kubernetes object being managed.

Question 376

Which Kubernetes metadata field is commonly used by selectors to identify a group of related objects?

1. annotations
2. finalizers
3. labels
4. ownerReferences

Correct Answer: 3

Explanation

Labels are key-value metadata attached to Kubernetes objects and are commonly used by selectors to identify groups of resources. Services, Deployments, ReplicaSets, and other Kubernetes mechanisms can use label selectors to associate resources with particular Pods. Annotations are generally intended for additional metadata that is not used for selection. Finalizers control deletion-related processing, while ownerReferences establish relationships between objects. Labels are therefore one of the most important mechanisms for organizing resources and connecting Kubernetes objects through selection.

Question 377

Which Kubernetes metadata mechanism can store additional information for tools or controllers without normally being used for selection?

1. Labels
2. Annotations
3. Replicas
4. Tolerations

Correct Answer: 2

Explanation

Annotations provide a place to store additional metadata associated with Kubernetes objects. They can contain information used by tools, controllers, or other systems without being intended as the primary mechanism for selecting resources. Labels are specifically designed for identifying and grouping objects and can be used by selectors. Replicas describe desired workload counts, while tolerations affect scheduling against node taints. Annotations are therefore useful for attaching supplementary information such as tool configuration, descriptions, or externally managed metadata.

Question 378

What is the purpose of an ownerReference on a Kubernetes object?

1. To specify the object’s container image
2. To identify another object as its owner for lifecycle relationships
3. To assign a DNS address
4. To define CPU limits

Correct Answer: 2

Explanation

An ownerReference establishes an ownership relationship between Kubernetes objects. Controllers can use these relationships to understand which resources belong to another resource. For example, Pods created by a ReplicaSet can have the ReplicaSet recorded as an owner. Kubernetes can use ownership information as part of garbage collection when an owning object is deleted. OwnerReferences do not define container images, DNS addresses, or CPU limits. They are mainly useful for expressing relationships between resources and supporting automated lifecycle management.

Question 379

Which Kubernetes metadata mechanism can delay deletion of an object until a controller completes required cleanup work?

1. Labels
2. Finalizers
3. ConfigMaps
4. Resource requests

Correct Answer: 2

Explanation

Finalizers can prevent a Kubernetes object from being fully deleted until specified cleanup operations have been completed. A controller or other component can add a finalizer to indicate that important cleanup is required. When deletion is requested, Kubernetes marks the object for deletion but retains it until the finalizers are removed. This mechanism is useful for resources that require external cleanup, such as cloud resources or other dependencies. Labels and ConfigMaps serve different purposes, while resource requests describe workload resource requirements.

Question 380

Which Kubernetes principle describes managing infrastructure and application configuration through declarative definitions rather than manually changing resources?

1. Imperative-only management
2. Declarative management
3. Manual scheduling
4. Runtime isolation

Correct Answer: 2

Explanation

Declarative management means defining the desired state of infrastructure or applications and allowing Kubernetes controllers to work toward that state. YAML manifests and tools such as kubectl apply are commonly used to express desired configurations. Kubernetes continuously compares the desired state with the observed state and performs reconciliation when differences occur. This approach improves consistency and supports repeatable deployments. Manual imperative commands can still be useful for operational tasks, but declarative management is a fundamental Kubernetes approach for maintaining predictable resource configurations.