KCNA practice questions 231–240

1. Question 231 · 282 in bank

   Which field in a Pod or Deployment manifest ensures that Pods are scheduled only on nodes with specific labels?

   • Aannotations: disktype: ssd
   • Blabels: disktype: ssd
   • CnodeSelector: disktype: ssd
   • Dresources: disktype: ssd

   Show answer

   Answer: C

   Next question

2. Question 232 · 282 in bank

   What is the purpose of the Gateway API in Kubernetes?

   • ATo collect, monitor, and log performance metrics for applications running inside Kubernetes Pods.
   • BTo define and manage persistent storage resources that are used by Pods within the cluster.
   • CTo provide a standardized interface for managing traffic routing to Services in a Kubernetes environment.
   • DTo enable applications to automatically adjust resource usage and scale up or down based on demand.

   Show answer

   Answer: C

   Next question

3. Question 233 · 282 in bank

   Why are ServiceAccounts used in Kubernetes when assigning Role-Based Access Control (RBAC) permissions to Pods?

   • AThey are used to authenticate Pods by creating special user identities for administrators to manage.
   • BThey are designed to provide a secure mechanism for storing application credentials inside Pods.
   • CThey automatically assign Pods high-level cluster-admin permissions for accessing resources.
   • DThey let Pods authenticate to the API server securely without personal user credentials.

   Show answer

   Answer: D

   Next question

4. Question 234 · 282 in bank

   In a cloud native environment, how do containerization and virtualization differ in terms of resource management?

   • AContainerization consumes more memory than virtualization by default.
   • BContainerization shares the host OS, while virtualization runs a full OS for each instance.
   • CContainerization uses hypervisors to manage resources, while virtualization does not.
   • DContainerization allocates resources per container, virtualization does not isolate them.

   Show answer

   Answer: B

   Next question

5. Question 235 · 282 in bank

   Which of the following commands could a cluster administrator use to prevent Pod scheduling in a node temporarily, for maintenance purposes?

   • Akubectl cordon
   • Bkubectl annotate
   • Ckubectl label
   • Dkubectl taint

   Show answer

   Answer: A

   Next question

6. Question 236 · 282 in bank

   A platform engineer wants to ensure that a new microservice is automatically deployed to every cluster registered in Argo CD. Which configuration best achieves this goal?

   • ACreate an Argo CD ApplicationSet that uses a Git repository containing the microservice manifests.
   • BSet up a Kubernetes CronJob that redeploys the microservice to all registered clusters on a schedule.
   • CUse a Helm chart to package the microservice and manage it with a single Application defined in ArgoCD.
   • DManually configure every registered cluster with the deployment YAML for installing the microservice.

   Show answer

   Answer: A

   Next question

7. Question 237 · 282 in bank

   Lightweight network proxies such as Envoy are part of which plane in a service mesh?

   • AManagement plane
   • BControl plane
   • CData plane
   • DGateway plane

   Show answer

   Answer: C

   Next question

8. Question 238 · 282 in bank

   Which of the following common practices will be an antipattern when the GitOps workflow goes live?

   • ADeploying Kubernetes objects via imperative commands.
   • BLeaving manual comments in the PR comments forum.
   • CDeploying Kubernetes objects via declarative manifests.
   • DPushing builds with the deploy label.

   Show answer

   Answer: A

   Next question

9. Question 239 · 282 in bank

   What command would be used to check the revisions of Deployment web-app?

   • Akubectl rollout history deployment/web-app
   • Bkubectl rollout status deployment/web-app
   • Ckubectl get history deployment/web-app
   • Dkubectl describe rollout deployment/web-app

   Show answer

   Answer: A

   Next question

10. Question 240 · 282 in bank

    Which statement is true about the Container Storage Interface (CSI) in Kubernetes?

    • ACSI is a Kubernetes-only API built into the kubelet; drivers are compiled in-tree and selected directly in a PersistentVolume.
    • BCSI introduces a model where applications mount storage by referencing the driver name in the Pod specification instead of using PVs.
    • CCSI provides storage for workloads by focusing on NFS and iSCSI backends and offering basic volume provisioning.
    • DCSI is a cross-platform specification; in Kubernetes, CSI drivers run as pods with sidecars and are consumed through StoragClass and PersistentVolumeClaim objects.

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

KCNA practice, question 231. 282 questions available.