View Full CNCF CKA Exam Dumps and Practice Test Dumps

 

Question 1

Which Kubernetes component stores cluster state persistently?

1. kubelet
2. kube-proxy
3. etcd
4. CoreDNS

Correct Answer: 3

Explanation:

etcd is the distributed key-value store used by Kubernetes to persist cluster state. The API server communicates with etcd to store information about objects such as Pods, Deployments, Services, and configuration data. Because the control plane depends on this state, protecting etcd and maintaining its availability are important administrative responsibilities. The kubelet instead manages Pods on individual nodes, kube-proxy handles service-related networking, and CoreDNS provides cluster DNS functionality. Understanding etcd is fundamental to Kubernetes cluster administration and troubleshooting.

Question 2

Which command initializes a Kubernetes control plane with kubeadm?

1. kubeadm init
2. kubeadm start
3. kubectl init
4. kubelet init

Correct Answer: 1

Explanation:

kubeadm init initializes a Kubernetes control plane on a prepared node. It performs essential setup tasks required to establish the control-plane components and generates information needed for joining additional nodes. Before running the command, the administrator must prepare the underlying host according to Kubernetes requirements. kubectl is the command-line client used to interact with the cluster after it becomes available, while kubelet manages containers and Pods on nodes. Proper kubeadm usage is an important part of CKA cluster administration.

Question 3

What does a Kubernetes Deployment primarily manage?

1. Network routes
2. Persistent volumes
3. DNS records
4. Replica-based workloads

Correct Answer: 4

Explanation:

A Deployment manages replicated application workloads and provides declarative control over their desired state. It creates and manages ReplicaSets, which maintain the requested number of Pod replicas. Deployments also support controlled application updates and rollbacks. Network routes, DNS records, and persistent volumes are handled through different Kubernetes resources and components. Administrators commonly use Deployments for stateless applications because they simplify scaling and lifecycle management while maintaining the specified number of running Pods.

Question 4

Which object provides key-value configuration data to Pods?

1. Service
2. ConfigMap
3. Ingress
4. Namespace

Correct Answer: 2

Explanation:

A ConfigMap stores non-sensitive configuration information in key-value form and can make that information available to containers. Applications can consume ConfigMap data through environment variables, command arguments, or mounted files. Sensitive information should instead be stored using Kubernetes Secrets. Services provide network access to workloads, Ingress manages external HTTP or HTTPS routing, and namespaces provide logical resource separation. ConfigMaps are therefore useful for keeping application configuration separate from container images.

Question 5

Which Kubernetes feature restricts access according to user roles?

1. RBAC
2. HPA
3. CSI
4. CNI

Correct Answer: 1

Explanation:

Role-Based Access Control, or RBAC, controls access to Kubernetes resources according to defined permissions and identities. Roles describe permitted actions on resources, while bindings associate those permissions with users, groups, or service accounts. RBAC helps administrators implement the principle of granting only the access required for a particular responsibility. HPA handles workload scaling, CSI provides a storage interface, and CNI relates to cluster networking. Proper RBAC configuration is a core part of Kubernetes cluster administration.

Question 6

Which resource requests persistent storage for a workload?

1. StorageClass
2. PersistentVolume
3. PersistentVolumeClaim
4. ConfigMap

Correct Answer: 3

Explanation:

A PersistentVolumeClaim, or PVC, represents a request for storage by a workload. It can specify requirements such as storage capacity and access mode. Kubernetes can bind the claim to a suitable PersistentVolume, either from existing storage or through dynamic provisioning when a StorageClass is configured. A PersistentVolume represents the storage resource itself, while a StorageClass defines storage provisioning behavior. ConfigMaps are unrelated to persistent storage and are intended for application configuration.

Question 7

Which component runs containers on a Kubernetes node?

1. kube-proxy
2. kubelet
3. CoreDNS
4. scheduler

Correct Answer: 2

Explanation:

The kubelet is the node agent responsible for ensuring that containers described by assigned Pod specifications are running as expected. It communicates with the container runtime and reports node and Pod information to the control plane. kube-proxy handles service networking functions, CoreDNS provides DNS services, and the scheduler selects suitable nodes for Pods. Understanding kubelet responsibilities is particularly important when troubleshooting workloads that fail to start or behave unexpectedly on individual nodes.

Question 8

Which object exposes Pods through a stable network endpoint?

1. Secret
2. ConfigMap
3. DaemonSet
4. Service

Correct Answer: 4

Explanation:

A Kubernetes Service provides a stable network endpoint for accessing a group of Pods. Because Pod IP addresses can change when Pods are recreated, applications should generally avoid depending directly on individual Pod addresses. Services use label selection to identify backend Pods and provide consistent access. A DaemonSet manages workloads across nodes, ConfigMaps store configuration, and Secrets store sensitive configuration data. Services are therefore a fundamental building block for Kubernetes application networking.

Question 9

What does a readiness probe determine?

1. Whether a Pod should receive traffic
2. Whether a node needs replacement
3. Whether storage needs expansion
4. Whether a Secret is encrypted

Correct Answer: 1

Explanation:

A readiness probe determines whether a container is currently ready to receive traffic. If the readiness check fails, Kubernetes can remove the Pod from the endpoints used by a Service while allowing the container to continue running. This differs from a liveness probe, which determines whether a container should be restarted. Proper readiness configuration is useful for applications that require initialization time or temporarily become unable to serve requests while remaining otherwise healthy.

Question 10

Which controller maintains a specified number of Pod replicas?

1. ReplicaSet
2. Namespace
3. ServiceAccount
4. Ingress

Correct Answer: 1

Explanation:

A ReplicaSet maintains a specified number of matching Pod replicas. If one of the managed Pods disappears, the ReplicaSet creates another to restore the desired count. Deployments commonly manage ReplicaSets rather than administrators creating them directly. Namespaces provide logical separation, ServiceAccounts provide identities for workloads, and Ingress defines external HTTP or HTTPS routing rules. Understanding ReplicaSets helps administrators troubleshoot unexpected Pod creation and understand how Deployments maintain workload availability.

Question 11

Which Kubernetes mechanism automatically adjusts Pod replicas based on metrics?

1. DaemonSet
2. StatefulSet
3. Horizontal Pod Autoscaler
4. Job

Correct Answer: 3

Explanation:

The Horizontal Pod Autoscaler, or HPA, automatically adjusts the number of Pod replicas according to configured metrics and target values. It is commonly used to respond to changing application demand. HPA works with scalable workload resources such as Deployments and ReplicaSets. A DaemonSet instead ensures Pods run according to node placement rules, a StatefulSet manages stateful workloads with stable identities, and a Job handles finite tasks. Proper metric configuration is necessary for effective autoscaling.

Question 12

Which scheduling rule can attract a Pod toward selected nodes?

1. Taint
2. Node label
3. Toleration
4. Node affinity

Correct Answer: 4

Explanation:

Node affinity allows administrators to express scheduling preferences or requirements based on node labels. A Pod can therefore be directed toward nodes possessing particular characteristics. Taints work differently by repelling Pods unless those Pods have matching tolerations. Node labels provide the attributes that affinity rules evaluate, while tolerations allow Pods to be scheduled onto appropriately tainted nodes. Understanding these mechanisms is important when controlling workload placement across a Kubernetes cluster.

Question 13

What is the main purpose of a Kubernetes Secret?

1. Store sensitive configuration
2. Expose application traffic
3. Schedule batch workloads
4. Maintain node labels

Correct Answer: 1

Explanation:

A Kubernetes Secret is designed to hold sensitive configuration data such as credentials, tokens, or keys. Pods can consume Secret data through environment variables or mounted volumes. Although Secrets provide a Kubernetes mechanism for managing sensitive information, administrators should also understand the cluster’s storage and encryption configuration because merely placing information in a Secret does not automatically provide every possible security guarantee. ConfigMaps are intended for non-sensitive configuration data.

Question 14

Which component assigns newly created Pods to nodes?

1. kubelet
2. controller manager
3. scheduler
4. kube-proxy

Correct Answer: 3

Explanation:

The Kubernetes scheduler selects an appropriate node for a newly created Pod that does not yet have a node assignment. It evaluates scheduling constraints and available resources before making the placement decision. The kubelet then manages the Pod on the selected node. kube-proxy handles service-related networking, while the controller manager runs various control loops that maintain desired cluster state. Scheduler behavior becomes especially important when Pods remain pending because of resource or placement constraints.

Question 15

Which resource defines a reusable storage provisioning policy?

1. StorageClass
2. PersistentVolumeClaim
3. ConfigMap
4. Service

Correct Answer: 1

Explanation:

A StorageClass defines a class of storage and the provisioning behavior associated with it. It allows administrators to describe characteristics such as the provisioner and relevant storage parameters. PersistentVolumeClaims can reference a StorageClass when requesting storage, enabling dynamic provisioning where supported. A PVC represents the consumer’s storage request, while a Service provides network access to Pods. StorageClasses therefore connect application storage requests with the infrastructure mechanism used to create suitable volumes.

Question 16

Which Kubernetes feature controls traffic between selected Pods?

1. ConfigMap
2. NetworkPolicy
3. ReplicaSet
4. StorageClass

Correct Answer: 2

Explanation:

NetworkPolicy defines rules controlling network traffic involving selected Pods. Policies can regulate allowed ingress and egress traffic based on factors such as Pod selectors, namespaces, and network ranges, depending on the networking implementation. Their actual enforcement requires a compatible network plugin. ConfigMaps manage configuration, ReplicaSets maintain Pod replicas, and StorageClasses handle storage provisioning. NetworkPolicy is therefore an important Kubernetes mechanism for controlling communication between workloads and implementing network segmentation.

Question 17

Which tool is commonly used to package and install Kubernetes applications?

1. Helm
2. kubelet
3. kube-proxy
4. etcdctl

Correct Answer: 1

Explanation:

Helm is a package manager for Kubernetes applications. It uses charts to bundle Kubernetes resources and supports configurable installations through chart values. Administrators can use Helm to install, upgrade, and manage application releases in a repeatable way. kubelet manages node workloads, kube-proxy supports service networking, and etcdctl is used for interacting with etcd. Helm is included in the current CKA curriculum as a tool for installing cluster components and applications.

Question 18

Which resource is designed for workloads requiring stable identities?

1. Deployment
2. StatefulSet
3. ConfigMap
4. Job

Correct Answer: 2

Explanation:

A StatefulSet is designed for applications that require stable identities, predictable naming, or persistent storage associations. Unlike ordinary stateless Deployments, StatefulSet-managed Pods maintain stable ordinal identities across rescheduling. This makes StatefulSets useful for certain databases and distributed applications that depend on persistent identity or ordered behavior. Deployments are generally better suited to interchangeable stateless replicas. Jobs instead manage finite task execution, while ConfigMaps provide application configuration.

Question 19

Which Kubernetes component provides internal DNS service discovery?

1. CoreDNS
2. kubelet
3. scheduler
4. controller manager

Correct Answer: 1

Explanation:

CoreDNS commonly provides DNS-based service discovery within a Kubernetes cluster. It allows workloads to resolve Kubernetes Service names rather than relying on changing Pod IP addresses. When DNS resolution fails, administrators may investigate CoreDNS Pods, configuration, Service connectivity, and related networking components. The kubelet manages node workloads, the scheduler assigns Pods to nodes, and the controller manager operates control loops. CoreDNS is therefore an important component when troubleshooting application name resolution.

Question 20

Which domain carries the largest weight in the current CKA curriculum?

1. Storage
2. Troubleshooting
3. Workloads and Scheduling
4. Services and Networking

Correct Answer: 2

Explanation:

Troubleshooting carries the largest weighting in the current CKA curriculum at 30%. The other domains are Cluster Architecture, Installation and Configuration at 25%, Services and Networking at 20%, Workloads and Scheduling at 15%, and Storage at 10%. The current CKA exam is performance-based rather than a conventional multiple-choice test, but practice questions can still help reinforce the concepts tested in practical tasks.