View Full CNCF CKA Exam Dumps and Practice Test Dumps

 

Question 381

Which scheduling rule requires Pods to prefer certain nodes?

1. nodePreference
2. nodeSelector
3. nodeAffinity
4. nodeRule

Correct Answer: 3

Explanation:

nodeAffinity provides more expressive node-selection rules than a simple nodeSelector. It can define required placement conditions as well as preferred conditions that influence scheduling without making them mandatory. This allows administrators to express requirements based on node labels while supporting more flexible scheduling behavior. For example, a workload can prefer nodes in a particular zone while still allowing placement elsewhere when necessary. Node affinity is evaluated by the scheduler as part of its scheduling process and works with other placement constraints.

Question 382

Which taint effect blocks new Pod scheduling without a toleration?

1. NoSchedule
2. PreferNoSchedule
3. NoExecute
4. BlockSchedule

Correct Answer: 1

Explanation:

NoSchedule prevents new Pods from being scheduled onto a tainted node unless those Pods have a matching toleration. Existing Pods that are already running on the node are not automatically removed solely because the taint is added. This makes NoSchedule useful when administrators want to reserve nodes for particular workloads or prevent additional placement. Other taint effects behave differently: NoExecute can affect already-running Pods, while PreferNoSchedule expresses a softer scheduling preference rather than a strict prohibition.

Question 383

Which taint effect can evict existing non-tolerating Pods?

1. NoSchedule
2. NoExecute
3. PreferNoSchedule
4. EvictExisting

Correct Answer: 2

Explanation:

The NoExecute taint effect can cause existing Pods that do not tolerate the taint to be removed from the node, in addition to preventing incompatible Pods from being scheduled there. Tolerations can optionally include a time limit through tolerationSeconds, allowing a Pod to remain for a defined period after the taint is applied. This behavior is commonly relevant during node problems or special maintenance conditions. Administrators should distinguish NoExecute from NoSchedule, which primarily affects future scheduling decisions.

Question 384

Which resource assigns a numeric priority to Pods?

1. PodPriority
2. PriorityRule
3. PriorityClass
4. SchedulingClass

Correct Answer: 3

Explanation:

A PriorityClass defines a priority value that can be assigned to Pods. Higher-priority Pods can receive preferential treatment during scheduling and may participate in preemption when cluster resources are insufficient. The Pod references the desired PriorityClass through its priorityClassName field. Priority is distinct from resource requests: a high-priority Pod still needs suitable resources on a node. Administrators can use PriorityClasses to distinguish critical workloads from less important workloads while carefully considering the effects of preemption.

Question 385

Which scheduler phase filters unsuitable nodes?

1. scoring
2. binding
3. filtering
4. selection

Correct Answer: 4

Explanation:

The scheduler’s filtering stage removes nodes that cannot satisfy a Pod’s scheduling requirements. Conditions such as resource availability, taints, node affinity, volume constraints, and other rules can cause a node to be filtered out. After filtering, remaining feasible nodes can proceed to scoring, where the scheduler evaluates preferences and ranks candidates. Understanding this distinction helps when diagnosing Pending Pods: if every node is filtered out, the Pod cannot proceed to the later scoring and binding stages.

Question 386

Which scheduler phase ranks feasible nodes?

1. scoring
2. filtering
3. reservation
4. validation

Correct Answer: 1

Explanation:

After unsuitable nodes have been filtered, the scheduler’s scoring stage evaluates the remaining feasible nodes and assigns scores according to configured scheduling plugins and preferences. The scheduler can then select a node based on the resulting scores. Scoring therefore expresses preferences rather than basic eligibility. A node may satisfy all mandatory requirements yet receive a lower score than another suitable node. When investigating unexpected placement, administrators should distinguish mandatory filtering constraints from preference-based scoring decisions.

Question 387

Which storage resource requests dynamically provisioned storage?

1. PersistentVolume
2. StorageRequest
3. PersistentVolumeClaim
4. VolumeClaimSet

Correct Answer: 3

Explanation:

A PersistentVolumeClaim requests storage for a workload. When dynamic provisioning is configured, the claim can cause Kubernetes to provision an appropriate PersistentVolume through a StorageClass. The claim specifies requirements such as requested capacity and access modes. Pods then reference the claim rather than directly managing the underlying storage implementation. If a PVC remains Pending, administrators should inspect its requested capacity, access modes, StorageClass, provisioner, and related events to determine why suitable storage has not been made available.

Question 388

Which storage resource represents provisioned persistent storage?

1. PersistentVolume
2. StorageVolume
3. VolumeResource
4. PersistentDisk

Correct Answer: 1

Explanation:

A PersistentVolume represents storage available to the Kubernetes cluster for persistent use. It can be statically created by an administrator or dynamically provisioned through a StorageClass and storage driver. A PersistentVolume has properties such as capacity, access modes, reclaim policy, and storage source. Pods normally consume PersistentVolumes indirectly through PersistentVolumeClaims. When storage binding fails, administrators should compare the PVC requirements with the available PersistentVolumes and inspect storage-related events.

Question 389

Which resource defines dynamic volume provisioning behavior?

1. VolumeProfile
2. StorageClass
3. ProvisionPolicy
4. StorageTemplate

Correct Answer: 2

Explanation:

A StorageClass defines parameters and provisioning behavior for dynamically created PersistentVolumes. It can identify a provisioner and provide implementation-specific parameters, reclaim behavior, and other storage settings. A PVC can request a StorageClass to obtain dynamically provisioned storage. Different StorageClasses can represent different performance characteristics or storage backends. When a claim cannot be dynamically provisioned, administrators should inspect the selected StorageClass, its provisioner, events, and the associated CSI components.

Question 390

Which reclaim policy deletes dynamically provisioned storage resources?

1. Preserve
2. Retain
3. Delete
4. Archive

Correct Answer: 3

Explanation:

The Delete reclaim policy allows Kubernetes and the associated storage provisioner to remove the underlying storage when the PersistentVolume is released, according to the provisioner’s behavior. This is commonly used for dynamically provisioned volumes where the storage should not remain after its claim is removed. Retain has a different purpose: it preserves the volume and its associated storage for manual recovery or reuse. Administrators should choose reclaim policies carefully because deletion can result in permanent data loss.

Question 391

Which access mode permits multiple nodes to read and write a volume?

1. ReadWriteMany
2. SharedReadWrite
3. MultiNodeWrite
4. ClusterWrite

Correct Answer: 1

Explanation:

ReadWriteMany, or RWX, allows a volume to be mounted as read-write by multiple nodes when the underlying storage implementation supports that access mode. This is useful for workloads that need shared writable storage across Pods running on different nodes. Not every storage backend supports RWX, so the access mode requested by a PVC must be compatible with the provisioned storage. Administrators should check the CSI driver’s capabilities and the StorageClass when a claim requesting shared writable access cannot be fulfilled.

Question 392

Which volume type shares a directory from the node filesystem?

1. nodePath
2. hostPath
3. localDirectory
4. filesystemPath

Correct Answer: 2

Explanation:

The hostPath volume type mounts a file or directory from the node’s filesystem into a Pod. It can be useful for specialized node-level workloads that need access to host files, but it reduces workload isolation and can create portability concerns because the referenced path exists on the node rather than in portable cluster storage. Administrators should use hostPath carefully and understand the security implications. A workload depending on hostPath may also behave differently when scheduled onto another node where the expected path or data does not exist.

Question 393

Which volume type stores data temporarily with the Pod lifecycle?

1. emptyDir
2. tempVolume
3. podStorage
4. transientDir

Correct Answer: 1

Explanation:

An emptyDir volume is created when a Pod is assigned to a node and provides temporary storage shared by containers within that Pod. The directory exists for the lifetime of the Pod on that node and is removed when the Pod is removed. It is useful for scratch data, temporary files, caching, or communication between containers. Because it is not persistent across Pod replacement, it should not be used when application data must survive the Pod lifecycle. Administrators should distinguish emptyDir from persistent storage backed by a PersistentVolume.

Question 394

Which resource limits namespace-wide object consumption?

1. NamespaceLimit
2. ResourceQuota
3. ObjectQuota
4. ClusterQuota

Correct Answer: 4

Explanation:

A ResourceQuota limits aggregate resource consumption within a namespace. It can restrict quantities such as CPU, memory, storage, and counts of selected Kubernetes objects. Resource quotas help prevent one namespace or team from consuming an uncontrolled share of cluster resources. When a resource creation request is rejected because of quota, administrators can inspect the namespace’s ResourceQuota objects and current usage. Quotas operate at the namespace level and complement other controls such as LimitRanges.

Question 395

Which object defines default resource requests for containers?

1. ResourceDefaults
2. LimitRange
3. ContainerPolicy
4. NamespaceResources

Correct Answer: 2

Explanation:

A LimitRange can define default CPU and memory requests or limits for containers in a namespace. It can also impose minimum and maximum resource constraints. This helps establish consistent resource behavior when users create Pods without explicitly specifying every resource value. ResourceQuota and LimitRange serve different purposes: a quota controls aggregate namespace consumption, while a LimitRange governs individual resource settings and defaults. When a Pod receives unexpected resource values, administrators should inspect the namespace’s LimitRange configuration.

Question 396

Which Kubernetes object stores sensitive application values?

1. ConfigMap
2. Secret
3. SecureMap
4. CredentialSet

Correct Answer: 2

Explanation:

A Kubernetes Secret is designed to hold sensitive data such as passwords, tokens, or keys that applications may need. Secrets can be exposed to containers through environment variables or mounted as files. Although Secrets provide Kubernetes mechanisms for handling sensitive values, administrators should also configure appropriate access control and encryption protections because Secret data requires careful security management. A ConfigMap is intended for non-confidential configuration. When a workload cannot access a Secret, administrators should inspect the referenced Secret, namespace, key names, and Pod permissions.

Question 397

Which API object records Pod scheduling and lifecycle events?

1. Event
2. ActivityLog
3. PodHistory
4. AuditRecord

Correct Answer: 1

Explanation:

An Event records information about notable occurrences involving Kubernetes resources. Events can reveal scheduling failures, image-pull problems, mounting errors, probe failures, and other operational conditions. They are especially useful during troubleshooting because they often explain why a resource is Pending or failing. Administrators can inspect events with kubectl commands and correlate their timestamps with workload behavior. Events are not intended to replace persistent application logs or audit records, and their retention is generally limited compared with long-term logging systems.

Question 398

Which command displays recent events across all namespaces?

1. kubectl get events –global
2. kubectl events –all
3. kubectl get events -A
4. kubectl list events –cluster

Correct Answer: 3

Explanation:

kubectl get events -A retrieves Event objects across all namespaces. The -A option is the shorthand for –all-namespaces. This is useful when troubleshooting cluster-wide issues where the affected namespace is not immediately known. Administrators can inspect event reasons, involved objects, timestamps, and messages to identify problems such as scheduling failures or image-pull errors. Filtering or sorting the results can make large event sets easier to analyze during active troubleshooting.

Question 399

Which command shows detailed information about a node?

1. kubectl inspect node
2. kubectl describe node
3. kubectl node details
4. kubectl show node

Correct Answer: 2

Explanation:

kubectl describe node displays detailed information about a specific node, including labels, conditions, capacity, allocatable resources, taints, addresses, running Pods, and recent events. It is one of the most useful commands when diagnosing node-related problems. For example, a node showing NotReady may have conditions or events indicating kubelet, networking, storage, or resource-pressure issues. Administrators can combine the command with kubectl get nodes to first identify the node status and then investigate the affected node in detail.

Question 400

Which node condition indicates insufficient available disk space?

1. MemoryPressure
2. PIDPressure
3. NetworkUnavailable
4. DiskPressure

Correct Answer: 4

Explanation:

DiskPressure indicates that a node is experiencing pressure related to available disk space or inode availability. Kubernetes can respond to node pressure through eviction mechanisms to protect node stability. Administrators investigating DiskPressure should examine filesystem usage, container images, writable container layers, logs, and ephemeral storage consumption. The condition differs from MemoryPressure, which concerns memory availability, and PIDPressure, which concerns process IDs. Reviewing node conditions and events with kubectl describe node can help identify the underlying resource problem.