{"id":21071,"date":"2026-09-24T10:35:03","date_gmt":"2026-09-24T10:35:03","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=21071"},"modified":"2026-09-24T10:35:03","modified_gmt":"2026-09-24T10:35:03","slug":"cncf-cka-practice-test-questions-and-exam-dumps-part9-q161-180","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/cncf-cka-practice-test-questions-and-exam-dumps-part9-q161-180\/","title":{"rendered":"CNCF CKA Practice Test Questions and Exam Dumps Part9 Q161-180"},"content":{"rendered":"

View Full <\/b>CNCF CKA Exam Dumps<\/b><\/a> and Practice Test Dumps<\/b><\/h2>\n

 <\/p>\n

Question 161<\/b><\/h3>\n

Which command safely evicts eligible Pods from a node?<\/b><\/p>\n

    \n
  1. kubectl evacuate<\/span><\/li>\n
  2. kubectl drain<\/span><\/li>\n
  3. kubectl relocate<\/span><\/li>\n
  4. kubectl migrate<\/span><\/li>\n<\/ol>\n

    Correct Answer: 2<\/b><\/p>\n

    Explanation:<\/b><\/p>\n

    The kubectl drain command prepares a node for maintenance by marking it unschedulable and attempting to evict eligible Pods. It is commonly used before rebooting, upgrading, or servicing a node. Pods managed by controllers can usually be recreated on other suitable nodes. Certain workloads, local storage, or unmanaged Pods may require additional flags or manual handling. Draining differs from cordoning because cordon only prevents new scheduling, while drain also attempts to remove existing workloads safely according to Kubernetes eviction rules.<\/span><\/p>\n

    Question 162<\/b><\/h3>\n

    Which Kubernetes mechanism stores cluster state persistently?<\/b><\/p>\n

      \n
    1. kubelet<\/span><\/li>\n
    2. kube-scheduler<\/span><\/li>\n
    3. kube-proxy<\/span><\/li>\n
    4. etcd<\/span><\/li>\n<\/ol>\n

      Correct Answer: 4<\/b><\/p>\n

      Explanation:<\/b><\/p>\n

      etcd is the distributed key-value store used by Kubernetes to persist cluster state. Kubernetes API objects and configuration information are stored through the API server in etcd. The API server provides controlled access to this data rather than allowing ordinary clients to communicate with etcd directly. Because etcd contains critical cluster information, its availability and data protection are important for control-plane reliability. Backup and recovery procedures for etcd are therefore significant administrative tasks when maintaining Kubernetes clusters.<\/span><\/p>\n

      Question 163<\/b><\/h3>\n

      Which field identifies the desired number of Deployment replicas?<\/b><\/p>\n

        \n
      1. spec.replicas<\/span><\/li>\n
      2. status.count<\/span><\/li>\n
      3. metadata.replicas<\/span><\/li>\n
      4. spec.instances<\/span><\/li>\n<\/ol>\n

        Correct Answer: 1<\/b><\/p>\n

        Explanation:<\/b><\/p>\n

        The spec.replicas field defines the desired number of Pods for a Deployment. The Deployment controller works with its ReplicaSet to maintain that requested count. If Pods disappear or become unavailable for reasons that trigger replacement, the controllers attempt to restore the desired state. The status section instead reports observed information rather than defining the requested configuration. Administrators frequently modify spec.replicas when scaling workloads manually, while an autoscaler can also adjust this value according to its scaling logic.<\/span><\/p>\n

        Question 164<\/b><\/h3>\n

        Which control-plane component exposes the Kubernetes API?<\/b><\/p>\n

          \n
        1. etcd<\/span><\/li>\n
        2. kubelet<\/span><\/li>\n
        3. kube-apiserver<\/span><\/li>\n
        4. kube-scheduler<\/span><\/li>\n<\/ol>\n

          Correct Answer: 3<\/b><\/p>\n

          Explanation:<\/b><\/p>\n

          The kube-apiserver is the central component that exposes the Kubernetes API. Clients such as kubectl communicate with the API server to create, retrieve, modify, and delete Kubernetes resources. The API server also handles authentication, authorization, admission processing, and coordination with storage such as etcd. Other control-plane components communicate with the API server as well. Because it serves as the primary interface to cluster state, API server availability is essential for administrative operations and controller activity.<\/span><\/p>\n

          Question 165<\/b><\/h3>\n

          Which resource enables automatic storage creation for a PVC?<\/b><\/p>\n

            \n
          1. StorageClass<\/span><\/li>\n
          2. VolumeTemplate<\/span><\/li>\n
          3. StoragePolicy<\/span><\/li>\n
          4. ProvisioningConfig<\/span><\/li>\n<\/ol>\n

            Correct Answer: 1<\/b><\/p>\n

            Explanation:<\/b><\/p>\n

            A StorageClass provides the information Kubernetes needs for dynamic storage provisioning. When a PersistentVolumeClaim requests a suitable StorageClass, the configured provisioner can create storage automatically instead of requiring an administrator to create a PersistentVolume beforehand. StorageClass parameters can describe backend-specific characteristics such as performance tiers or filesystem settings. This abstraction allows application manifests to request storage without embedding detailed infrastructure provisioning procedures directly into the workload definition.<\/span><\/p>\n

            Question 166<\/b><\/h3>\n

            Which Linux service commonly manages kubelet startup on systemd nodes?<\/b><\/p>\n

              \n
            1. containerd<\/span><\/li>\n
            2. systemd<\/span><\/li>\n
            3. crictl<\/span><\/li>\n
            4. journalctl<\/span><\/li>\n<\/ol>\n

              Correct Answer: 2<\/b><\/p>\n

              Explanation:<\/b><\/p>\n

              On Linux distributions using systemd, the kubelet is commonly managed as a systemd service. Administrators can use commands such as systemctl status kubelet, systemctl restart kubelet, and systemctl enable kubelet to inspect or manage its service state. The container runtime has a different responsibility because it runs containers rather than supervising the kubelet process. Understanding the service manager is useful during node troubleshooting, particularly when the kubelet fails to start or requires a configuration change followed by a restart.<\/span><\/p>\n

              Question 167<\/b><\/h3>\n

              Which object can expose a custom application metric to HPA?<\/b><\/p>\n

                \n
              1. ConfigMap<\/span><\/li>\n
              2. ServiceAccount<\/span><\/li>\n
              3. Custom metrics API<\/span><\/li>\n
              4. StorageClass<\/span><\/li>\n<\/ol>\n

                Correct Answer: 3<\/b><\/p>\n

                Explanation:<\/b><\/p>\n

                The HorizontalPodAutoscaler can use custom metrics when the cluster provides an appropriate custom metrics API implementation. This allows scaling decisions to be based on application-specific measurements rather than only standard CPU or memory metrics. Examples might include request rates, queue depth, or another workload-specific measurement. The metrics infrastructure must expose the required metric in a form that HPA can query. This gives administrators greater flexibility when resource consumption alone does not accurately represent application demand.<\/span><\/p>\n

                Question 168<\/b><\/h3>\n

                Which Service feature preserves client source IP in supported configurations?<\/b><\/p>\n

                  \n
                1. sessionAffinity<\/span><\/li>\n
                2. internalTrafficPolicy<\/span><\/li>\n
                3. externalTrafficPolicy<\/span><\/li>\n
                4. sourcePolicy<\/span><\/li>\n<\/ol>\n

                  Correct Answer: 3<\/b><\/p>\n

                  Explanation:<\/b><\/p>\n

                  The externalTrafficPolicy setting can influence how externally received Service traffic is handled and whether the original client source IP is preserved. With appropriate configuration, Local can preserve source addresses by routing traffic only to endpoints on the receiving node. This can be important for applications that rely on client IP information for logging, access control, or auditing. The behavior depends on the Service exposure method and networking implementation, so administrators should consider traffic routing and endpoint distribution when configuring it.<\/span><\/p>\n

                  Question 169<\/b><\/h3>\n

                  Which command retrieves a resource definition in YAML format?<\/b><\/p>\n

                    \n
                  1. kubectl get<\/span><\/li>\n
                  2. kubectl show<\/span><\/li>\n
                  3. kubectl export<\/span><\/li>\n
                  4. kubectl dump<\/span><\/li>\n<\/ol>\n

                    Correct Answer: 1<\/b><\/p>\n

                    Explanation:<\/b><\/p>\n

                    The kubectl get command can display a resource in YAML format by using the -o yaml output option. For example, kubectl get pod example -o yaml returns the complete object representation available through the API. This is useful for inspecting fields, troubleshooting configuration, and preparing manifests based on existing objects. Administrators should distinguish the live object representation from a clean declarative manifest because generated metadata and runtime status may also appear in the YAML output.<\/span><\/p>\n

                    Question 170<\/b><\/h3>\n

                    Which probe determines whether an application process is alive?<\/b><\/p>\n

                      \n
                    1. Readiness probe<\/span><\/li>\n
                    2. Startup probe<\/span><\/li>\n
                    3. Liveness probe<\/span><\/li>\n
                    4. Availability probe<\/span><\/li>\n<\/ol>\n

                      Correct Answer: 3<\/b><\/p>\n

                      Explanation:<\/b><\/p>\n

                      A liveness probe determines whether a container should be considered alive and functioning. If repeated liveness checks fail according to the configured thresholds, the kubelet can restart the affected container. This differs from readiness checks, which control whether the workload receives Service traffic. Startup probes provide additional protection for applications that need considerable initialization time. A correctly configured liveness probe should identify genuine application failure without causing unnecessary restarts during normal startup or temporary delays.<\/span><\/p>\n

                      Question 171<\/b><\/h3>\n

                      Which command can create a temporary debugging Pod?<\/b><\/p>\n

                        \n
                      1. kubectl debug<\/span><\/li>\n
                      2. kubectl troubleshoot<\/span><\/li>\n
                      3. kubectl inspect-pod<\/span><\/li>\n
                      4. kubectl diagnose<\/span><\/li>\n<\/ol>\n

                        Correct Answer: 1<\/b><\/p>\n

                        Explanation:<\/b><\/p>\n

                        The kubectl debug command provides mechanisms for creating debugging containers or Pods to investigate runtime problems. It can be useful when an application image lacks troubleshooting utilities or when an administrator needs a temporary environment for diagnostics. Depending on the debugging scenario, the command can target a workload, node, or existing Pod. This makes it particularly valuable during practical Kubernetes administration tasks where direct inspection with the original application image is insufficient.<\/span><\/p>\n

                        Question 172<\/b><\/h3>\n

                        Which object controls authentication credentials for workload API access?<\/b><\/p>\n

                          \n
                        1. Role<\/span><\/li>\n
                        2. ServiceAccount<\/span><\/li>\n
                        3. ResourceQuota<\/span><\/li>\n
                        4. EndpointSlice<\/span><\/li>\n<\/ol>\n

                          Correct Answer: 2<\/b><\/p>\n

                          Explanation:<\/b><\/p>\n

                          A ServiceAccount provides an identity for processes running inside Pods when they need to interact with the Kubernetes API. RBAC permissions can then be assigned to that ServiceAccount through RoleBindings or ClusterRoleBindings. This separates workload identity from human user identities and allows administrators to grant only the permissions an application requires. ServiceAccounts are therefore an important component of workload authentication and authorization within Kubernetes clusters.<\/span><\/p>\n

                          Question 173<\/b><\/h3>\n

                          Which field specifies the container image registry path?<\/b><\/p>\n

                            \n
                          1. containerImage<\/span><\/li>\n
                          2. registryPath<\/span><\/li>\n
                          3. image<\/span><\/li>\n
                          4. imageSource<\/span><\/li>\n<\/ol>\n

                            Correct Answer: 3<\/b><\/p>\n

                            Explanation:<\/b><\/p>\n

                            The image field in a container specification identifies the container image that Kubernetes should run. It can include a registry address, repository, image name, and tag or digest. For example, an image reference can point to a private registry rather than a public default registry. The container runtime uses this reference when obtaining the image. Correct image naming is essential because an invalid repository, tag, registry address, or authentication configuration can prevent a container from starting.<\/span><\/p>\n

                            Question 174<\/b><\/h3>\n

                            Which object represents a non-namespaced cluster node?<\/b><\/p>\n

                              \n
                            1. Node<\/span><\/li>\n
                            2. WorkerGroup<\/span><\/li>\n
                            3. ClusterHost<\/span><\/li>\n
                            4. ComputeUnit<\/span><\/li>\n<\/ol>\n

                              Correct Answer: 1<\/b><\/p>\n

                              Explanation:<\/b><\/p>\n

                              A Node represents a machine that participates in a Kubernetes cluster and provides compute capacity for workloads. Nodes are cluster-scoped resources rather than namespaced objects. Each node typically runs components such as kubelet and a container runtime, with networking components also present depending on the cluster configuration. Administrators can inspect nodes for capacity, conditions, labels, taints, and other scheduling information. Because Nodes are not confined to namespaces, namespace-level resource boundaries do not directly scope the node object itself.<\/span><\/p>\n

                              Question 175<\/b><\/h3>\n

                              Which scheduling rule expresses a preferred placement rather than a requirement?<\/b><\/p>\n

                                \n
                              1. Required node affinity<\/span><\/li>\n
                              2. Preferred node affinity<\/span><\/li>\n
                              3. Mandatory topology rule<\/span><\/li>\n
                              4. Hard node selector<\/span><\/li>\n<\/ol>\n

                                Correct Answer: 2<\/b><\/p>\n

                                Explanation:<\/b><\/p>\n

                                Preferred node affinity expresses a scheduling preference rather than an absolute requirement. The scheduler attempts to place the Pod on nodes satisfying the preferred rule but can select another suitable node if the preference cannot be met. Required node affinity, in contrast, establishes a hard scheduling condition that must be satisfied. Preferred rules are useful when administrators want workloads distributed toward desirable node characteristics without risking indefinite Pending status when those characteristics are temporarily unavailable.<\/span><\/p>\n

                                Question 176<\/b><\/h3>\n

                                Which command shows labels assigned to Kubernetes resources?<\/b><\/p>\n

                                  \n
                                1. kubectl labels<\/span><\/li>\n
                                2. kubectl metadata<\/span><\/li>\n
                                3. kubectl get –show-labels<\/span><\/li>\n
                                4. kubectl display-labels<\/span><\/li>\n<\/ol>\n

                                  Correct Answer: 3<\/b><\/p>\n

                                  Explanation:<\/b><\/p>\n

                                  The –show-labels option with kubectl get displays labels alongside resource information. Labels are key-value metadata used extensively for selecting and organizing Kubernetes objects. Services, Deployments, NetworkPolicies, and other resources can use selectors to identify matching Pods. Viewing labels is therefore a useful troubleshooting technique when a Service has unexpected endpoints or a controller is not managing the intended Pods. Accurate label and selector relationships are essential for many Kubernetes workloads.<\/span><\/p>\n

                                  Question 177<\/b><\/h3>\n

                                  Which object defines a network rule controlling Pod traffic?<\/b><\/p>\n

                                    \n
                                  1. NetworkPolicy<\/span><\/li>\n
                                  2. TrafficRule<\/span><\/li>\n
                                  3. PodFirewall<\/span><\/li>\n
                                  4. NetworkACL<\/span><\/li>\n<\/ol>\n

                                    Correct Answer: 1<\/b><\/p>\n

                                    Explanation:<\/b><\/p>\n

                                    A NetworkPolicy defines rules governing network traffic to or from selected Pods. Policies can control ingress, egress, or both, depending on their configuration and the capabilities of the installed network plugin. A policy can select Pods using labels and then specify permitted traffic sources, destinations, ports, and protocols. NetworkPolicy behavior depends on a compatible networking implementation. Administrators should therefore verify that the cluster’s CNI implementation supports and enforces the desired policy rules.<\/span><\/p>\n

                                    Question 178<\/b><\/h3>\n

                                    Which command prints the current resource definitions stored by kubectl?<\/b><\/p>\n

                                      \n
                                    1. kubectl config dump<\/span><\/li>\n
                                    2. kubectl config view<\/span><\/li>\n
                                    3. kubectl config inspect<\/span><\/li>\n
                                    4. kubectl config show-all<\/span><\/li>\n<\/ol>\n

                                      Correct Answer: 2<\/b><\/p>\n

                                      Explanation:<\/b><\/p>\n

                                      The kubectl config view command displays the contents of the kubeconfig configuration used by kubectl. It can show configured clusters, users, contexts, and related settings. Administrators can combine it with options such as –minify when they want information related to the currently selected context. This is useful when diagnosing authentication or cluster-targeting problems. Because kubeconfig can contain credential information, administrators should handle its output carefully and avoid unnecessarily exposing sensitive data.<\/span><\/p>\n

                                      Question 179<\/b><\/h3>\n

                                      Which mechanism can automatically increase Pod replicas based on CPU usage?<\/b><\/p>\n

                                        \n
                                      1. Cluster Autoscaler<\/span><\/li>\n
                                      2. Vertical Pod Autoscaler<\/span><\/li>\n
                                      3. HorizontalPodAutoscaler<\/span><\/li>\n
                                      4. Node Autoscaler<\/span><\/li>\n<\/ol>\n

                                        Correct Answer: 3<\/b><\/p>\n

                                        Explanation:<\/b><\/p>\n

                                        The HorizontalPodAutoscaler can adjust the replica count of supported workloads based on observed metrics such as CPU utilization. When measured utilization moves above or below the configured target, the controller can increase or decrease the desired replica count within its configured boundaries. This differs from cluster-level autoscaling, which changes the number of nodes available for workloads. HPA therefore changes workload capacity rather than directly adding or removing worker machines.<\/span><\/p>\n

                                        Question 180<\/b><\/h3>\n

                                        Which command shows the current API server and cluster services?<\/b><\/p>\n

                                          \n
                                        1. kubectl cluster-info<\/span><\/li>\n
                                        2. kubectl server-status<\/span><\/li>\n
                                        3. kubectl api-status<\/span><\/li>\n
                                        4. kubectl control-plane<\/span><\/li>\n<\/ol>\n

                                          Correct Answer: 1<\/b><\/p>\n

                                          Explanation:<\/b><\/p>\n

                                          The kubectl cluster-info command provides endpoint information for the Kubernetes control plane and available cluster services. It is a useful initial command when verifying that kubectl can communicate with the configured cluster. It does not replace deeper health checks, component logs, or node inspection, but it quickly confirms basic API connectivity and displays relevant service endpoints. Administrators can use it together with other diagnostic commands when investigating control-plane communication or cluster-access problems.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

                                          View Full CNCF CKA Exam Dumps and Practice Test Dumps   Question 161 Which command safely evicts eligible Pods from a node? kubectl evacuate kubectl drain kubectl relocate kubectl migrate Correct Answer: 2 Explanation: The kubectl drain command prepares a node for maintenance by marking it unschedulable and attempting to evict eligible Pods. It is […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/21071"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=21071"}],"version-history":[{"count":1,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/21071\/revisions"}],"predecessor-version":[{"id":21072,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/21071\/revisions\/21072"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=21071"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=21071"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=21071"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}