KCNA practice questions 241–250

1. Question 241 · 282 in bank

   A Kubernetes deployment must run only on nodes with specific hardware capabilities. What configuration should be used to ensure that Pods are scheduled only on those nodes?

   • AUse Pod affinity rules in the deployment configuration.
   • BSet a PodDisruptionBudget for the deployment.
   • CUse a nodeSelector in the deployment specification.
   • DConfigure resource limits and requests for the Pods.

   Show answer

   Answer: C

   Next question

2. Question 242 · 282 in bank

   Which cloud native tool(s) keeps Kubernetes clusters in sync with sources of configuration (like Git repositories), and automates updates to configuration when there is new code to deploy?

   • AFlux and Argo CD
   • BHelm and Kustomize
   • CLinkerd and Istio
   • DTekton and Jenkins X

   Show answer

   Answer: A

   Next question

3. Question 243 · 282 in bank

   A Pod was created that shows the ErrImagePull status. What is most the cause of the error?

   • AKubelet is not running properly on the node.
   • BKube-scheduler cannot find a node to execute the Pod.
   • CThe container image cannot be downloaded.
   • DThe container image needs to run using hostNetwork.

   Show answer

   Answer: C

   Next question

4. Question 244 · 282 in bank

   Which statement best describes observability in a cloud native environment?

   • AObservability is the practice of collecting and analyzing logs, metrics, and traces to understand system behavior.
   • BObservability is the use of alerts and dashboards to notify administrators about system outages.
   • CObservability is the process of restarting failed Pods to maintain application availability.
   • DObservability is the configuration of health probes to check whether containers are running correctly.

   Show answer

   Answer: A

   Next question

5. Question 245 · 282 in bank

   Which statement best explains the Container Storage Interface (CSI) concept in Kubernetes?

   • ACSI is a standard API specification that allows Kubernetes (and other orchestrators) to use different storage systems via plugins.
   • BCSI is a networking interface that manages container-to-container communication across nodes.
   • CCSI is a Kubernetes-only API that provides built-in storage drivers for Pods to access persistent volumes.
   • DCSI is a framework inside Kubernetes that automatically provisions local node storage without requiring external storage plugins.

   Show answer

   Answer: A

   Next question

6. Question 246 · 282 in bank

   Gateway API is a successor to what Kubernetes API?

   • ANetworkPolicy
   • BService
   • CNodePort
   • DIngress

   Show answer

   Answer: D

   Next question

7. Question 247 · 282 in bank

   How are ConfigMap s correctly used in Kubernetes applications?

   • AA ConfigMap is used to adjust cluster scheduling rules applied by the Kubernetes scheduler.
   • BA ConfigMap is used to keep encrypted secrets such as passwords for databases or tokens.
   • CA ConfigMap is used to provide configuration values that Pods consume as files or variables.
   • DA ConfigMap is used to hold shared log files that applications produce during execution.

   Show answer

   Answer: C

   Next question

8. Question 248 · 282 in bank

   In a Kubernetes environment, how is an Argo CD ApplicationSet configured to ensure continuous deployment of an application?

   • ABy manually deploying the application using kubectl commands every time changes are made.
   • BBy defining the ApplicationSet in a YAML file and linking it to a Git repository containing application manifests.
   • CBy defining the ApplicationSet containing deployment parameters and applying it with kubectl.
   • DBy using a Helm chart to package the application and deploying it directly without GitOps.

   Show answer

   Answer: B

   Next question

9. Question 249 · 282 in bank

   DNS issues are suspected inside a Pod. Which command is most useful to verify the problem?

   • Akubectl delete pod to recreate the Pod and test if the issue resolves after restarting.
   • Bkubectl get endpoints to confirm whether Services have the correct backend addresses.
   • Ckubectl logs to review application output for errors related to DNS resolution.
   • Dkubectl exec -- nslookup to check name resolution directly inside the Pod.

   Show answer

   Answer: D

   Next question

10. Question 250 · 282 in bank

    In Kubernetes Role-Based Access Control (RBAC), what is the primary difference between a Role and a ClusterRole?

    • AA Role is generally weaker in scope and power, while a ClusterRole is always considered stronger and more powerful than a Role.
    • BA Role is namespace-scoped and applies only within a single namespace, while a ClusterRole is cluster-scoped and applies across all namespaces.
    • CA Role defines permissions for modifying resources, while a ClusterRole defines permissions only for viewing resources across the cluster.
    • DA Role is limited to granting access to Pods and Services, while a ClusterRole can grant access to every type of Kubernetes resource.

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

KCNA practice, question 241. 282 questions available.