Kubernetes Cloud Native Associate (KCNA) Certification 1 Practice Test

These questions are part of the practice quiz. Start practicing

• What is the purpose of the mount namespace in Linux?
• Which approach best supports autoscaling decisions?
• If you want to build and push images for multiple architectures in one step, which tool helps?
• What is the role of the Kube-Proxy in the Kubernetes infrastructure?
• What is the purpose of the schedulerName field in a pod's specification?
• What is a key benefit of Open Standards in computing and software development?
• Which statement best describes On-Demand instances in cloud computing?
• What are CronJobs in Kubernetes?
• What is the effect of the -d flag when starting a container?
• What is the default Kubernetes service type?
• Which of the following is NOT a default namespace provided with a standard Kubernetes installation?
• Which autoscaling approach is most suitable when you want to anticipate demand using historical data and trends, not just current metrics?
• Which role is typically involved in managing cloud workloads' delivery and optimization?
• How is the sensitive data stored in Kubernetes Secrets?
• Which of the following statements correctly describes concurrency management in serverless?
• Which sequence correctly represents the 4C's of Cloud Native Security?
• What is the role of the Kubelet in the Kubernetes architecture?
• How does dynamic provisioning of storage in Kubernetes differ from manual provisioning?
• Which is a potential use case for an Admission Controller in a Kubernetes cluster?
• If you run a command without specifying a namespace in Kubernetes, which namespace will it run in?
• Which tool would you use to assess security misconfigurations and vulnerabilities in a cluster automatically?
• Which statement about labels is accurate?
• Which acronym represents the Special Interest Groups within the CNCF?
• Which artifact would you configure to notify engineers about latency or error spikes?
• Which tool is an open-source runtime security project that integrates with Kubernetes for identifying abnormal behavior and potential security threats?
• What is the significance of Sandbox, Incubation, and Graduation stages in the CNCF?
• What is the purpose of using the -p option in 'docker run -d --rm -p 12345:80 nginx'?
• Which statement best captures the Zero Trust principle in Cloud Native security?
• What does the nodeName field in a pod specification indicate?
• What is the scaling model referred to as when using Serverless and its event-driven architecture?
• What happens when you set a Kubernetes ConfigMap as 'immutable'?
• What is the primary function of Helm in Kubernetes?
• Which command provides an interactive shell inside a running container, testing ability to reach /bin/bash?
• Which OCI specification defines how content is distributed between registries?
• If a StatefulSet named 'web' has a pod with index 2, what is its pod name?
• Which option is typically ephemeral storage for a pod?
• What practice helps ensure that automatic scaling does not negatively impact user experience?
• What does SMI enable across multiple service mesh implementations?
• What does the Container Runtime Interface (CRI) enable in the Kubernetes ecosystem?
• What is the primary purpose of the Cluster Autoscaler in Kubernetes?
• Which command is used to create a private key with 4096 bits?
• When a pod is created using kubectl run in Kubernetes, what type of label is automatically assigned to it?
• Which statement best describes a Kubernetes Namespace?
• Which Linux components form the basis that Docker leverages to isolate processes and resources?
• What is the better approach for managing files used by a container instead of modifying them directly within the container?
• Which certificate subject field is used to identify the user in a client certificate?
• What is the CNCF's mission?
• The Kubernetes API is commonly described as which type of interface?
• Which command would undo the most recent Deployment rollout?
• Which term describes the registry-provided, content-addressable identifier for a specific image?
• By default, how many completed and failed jobs are kept in a CronJob according to the successfulJobsHistoryLimit field?
• What is a potential risk when using secrets in Kubernetes?
• Which step does not belong in the path a request to the Kubernetes API follows?
• Which command applies a configuration file to create or update resources in a declarative manner?
• How are pods in a Kubernetes StatefulSet named?
• Setting the nodeName field in a Pod specification has what effect?
• What is the purpose of the Container Storage Interface (CSI)?
• Which stage comes after Sandbox in the CNCF maturity model?
• Which statement accurately describes the difference between Roles and ClusterRoles in Kubernetes?
• How do you run a pod with a specific image in Kubernetes?
• What is the primary function of NetworkPolicies in Kubernetes?
• Which of the following is NOT a role of the Kube-Scheduler?
• What is a union filesystem in the context of container images?
• What is a key consideration when using Reserved Instances in cloud computing?
• How is a new user, such as "batman", associated with a group in Kubernetes RBAC?
• Which two terms describe the concept of building serverless functionality on Kubernetes as described in the material?
• What is Keda in the context of Autoscaling?
• In Docker's architecture, which two Linux concepts are the fundamental building blocks?
• When a Pod is deployed without an explicitly assigned Service Account, which Service Account is automatically assigned?
• What does the docker system prune command do?
• How is conflict resolution generally handled within CNCF governance?
• In the context of CI/CD, what does 'Continuous Integration' encourage?
• What does the ENTRYPOINT in a Dockerfile do?
• How do you publish all exposed ports of a container when running it with Docker?
• In a service mesh, which component is responsible for configuring proxies and policies?
• Which role can be considered the bridge between traditional IT Security and DevOps?
• In Kubernetes, which is an example of ephemeral storage?
• In the context of monolithic applications, tight coupling often means which of the following?
• Which service type creates a DNS CNAME-like alias of another domain?
• Grafana is primarily used for which of the following in an observability stack?
• Which statement is true about an image ID?
• Which of the following is not a type of telemetry in the context of Cloud Native Observability?
• Which command is used to execute another process inside a running Docker container?
• In Kubernetes cost monitoring, which capability is essential to analyze spend on resources?
• In Cloud Native security, what does Secure by Default mean?
• The 'Chasm' phase in the CNCF Project Maturity levels represents the bridge to which user category?
• In a monolithic architecture, what is a common drawback when multiple modules share a library?
• Which container engine is used by Docker according to the material?
• What is the primary use case of a ClusterIP service in Kubernetes?
• Which Kubernetes namespace is readable by all users, including unauthenticated ones?
• Which statement best describes Serverless architecture's event-driven nature?
• Which statement about ETCD is NOT accurate?
• What flag would you use to fetch logs for a specific container in a pod when using kubectl logs?
• Which autoscaling type is triggered by a pre-defined time-based schedule?
• Which statement about ConfigMaps is true?
• What is the purpose of a Namespace in Kubernetes?
• Which Kubernetes object is used to request storage from a pool of PersistentVolumes?
• Keda uses ScaledObjects to drive scaling. Which statement best describes its relationship to ScaledObjects?
• What is the purpose of a multistage build in a Dockerfile?
• What is required for Helm's plugin installation?
• Which command would you use to view logs for a container named 'db' in a pod named 'backend' including previous logs?
• What does the -it option do when running a Docker container?
• Why are Docker containers preferred over virtual machines?
• The Kubernetes API is often described as a CRUD interface. What does CRUD stand for in this context?
• What is the reference implementation of the OCI runtime specification?
• What does the Reclaim Policy Retain imply for a Persistent Volume in Kubernetes?
• What is the primary function of a Job in Kubernetes?
• How do NetworkPolicies behave when multiple policies are applied to a set of pods in Kubernetes?
• Which feature of Serverless offerings helps manage workload and billing?
• How do you check the status of pods running in Kubernetes?
• In kubectl, what does the -A flag do when listing resources?
• What is the function of a LoadBalancer service type in Kubernetes?
• Which component bridges the functionality of the cloud provider to the Kubernetes server?
• Which statement differentiates a Headless service from a standard ClusterIP service?
• Which CronJob field controls how many completed and failed jobs are kept?
• What is the primary function of KubeCost in cloud-native environments?
• What is a key economic consideration when autoscaling is enabled?
• In the path a request to the Kubernetes API follows, which step occurs immediately after Authorization?
• What does the --selector option do in a kubectl get command?
• How are Users and Groups typically managed in Kubernetes?
• Which role is commonly considered to have crossover with DevOps due to overlapping skillsets?
• What is the network namespace in Linux used for?
• Which service type acts as a DNS alias to another domain?
• Which storage solution is known for providing block, file, and object storage in distributed systems?
• Which term best describes the ability of Cloud Native applications to recover automatically from failures by restarting processes?
• What encoding mechanism is used in Kubernetes Secrets?
• What is the difference between the -l and --selector options in Kubernetes commands?
• What do Helm Charts describe in Kubernetes deployments?
• What is the primary benefit of Container Orchestration in the deployment of complex applications?
• If a Kubernetes cluster hosted on a public cloud provider fails to provision a requested load balancer service, which component might be responsible for this failure?
• What is the role of the nodeSelector field in a pod's specification?
• Which practice improves portability of cloud-native applications across different clouds?
• What happens when you run docker system prune with default options?
• If a resource is 'Namespaced' in Kubernetes, what does this mean?
• Which specification defines the format of an image that can be stored in a registry?
• How can labels be used to create scopes or environments within a Kubernetes cluster?
• What Kubernetes feature defines privilege and access control settings for a Pod or Container?
• Why would you add a nodeSelector to a Pod specification in Kubernetes?
• Which option correctly lists the key pillars of Cloud Native Architecture?
• Which implementation is the canonical reference for the OCI runtime specification?
• What is the primary difference between Deployments and StatefulSets in Kubernetes?
• According to a CronJob's schedule, which Kubernetes object is created?
• What is the purpose of the latest tag in Docker?
• What is one of the key security features provided by a Service Mesh?
• What is a potential consequence of having too many layers in a container image?
• If you want to prevent pod creation unless it passes a policy check, which Kubernetes feature would you rely on?
• What does the command 'docker run --rm nginx' do?
• Which two areas are highlighted as part of KCNA’s added emphasis?
• What is the primary function of a Cloud Architect?
• Which namespace would you typically look in for Kubernetes control plane components?
• What is the primary purpose of Kube-State-Metrics?
• What is a major challenge with monolithic applications?
• What does docker --help provide?
• In Cloud Native architecture, which approach enables independent development, deployment, and scaling of components?
• Which project would you deploy to automatically provision Prometheus and Grafana dashboards in Kubernetes?
• Which tool is considered the gold standard for Container Orchestration?
• Which Kubernetes resource is used to store key-value configuration data for pods?
• How is remote proctoring described for KCNA exams?
• Which telemetry type is most suitable for understanding the path of a request across multiple services?
• What does TAG stand for within the CNCF?
• Which CNCF maturity stage immediately precedes Graduated?
• Which option automatically removes the container when it exits?
• What is the Kubernetes object YAML configuration management command that provides a declarative approach?
• Which organization hosts the CloudEvents specification?
• What is the function of Kubernetes Deployment?
• Which statement best describes Kubernetes replicas in the context of Self Healing?
• What is the role of the Kube-Api Server in the Kubernetes architecture?
• What is one key difference between managing resources in Docker Desktop on a Mac compared to Windows?
• AWS Lambda is an example of?
• In Kubernetes, what is the purpose of a sidecar container in a pod?
• Which of the following is not a key area where Container Orchestration excels?
• In Container Orchestration, what is the purpose of 'self-healing'?
• Which Kubernetes objects can be labeled?
• Which Pod specification field ensures the pod is scheduled only on nodes with matching labels?
• In a Monolithic application, what issue can arise due to multiple applications being dependent on the same library?
• Which of these is an example of a Trace in Cloud Native Observability?
• What is the role of the Technical Oversight Committee (TOC) in the CNCF?
• How does the kubectl proxy command in Kubernetes handle API server authentication?
• How can you delete a pod named 'nginx' in a specific namespace called mynamespace in Kubernetes?
• Which storage option is commonly used to provide block, file, and object storage in distributed systems?
• For how long is the Kubernetes API guaranteed to be backward compatible following a release?
• Which Linux feature is responsible for isolating mount points within a namespace?
• Which command is used to view all resources within all namespaces in a Kubernetes cluster?
• Which of the following is not a type of telemetry in Cloud Native Observability, based on common definitions?
• Which autoscaling method uses predictive analytics to forecast demand and scale ahead of time?
• OpenTracing and OpenTelemetry primarily operate in which layer of a software system?
• What is the purpose of 'kubectl annotate' command in Kubernetes?
• Which statement best describes deployments in Kubernetes?
• Which two tools are commonly used as Pod Admission Controllers to enforce policies?
• What is the purpose of the 'serviceName' in a StatefulSet configuration?
• What is the purpose of the "t" flag when running the 'docker run' command?
• If the image does not exist locally, what will Docker do when you run a container?
• In Kubernetes, how does a Service identify which pods it should route traffic to?
• Which command would you use to view the logs of a container that has crashed and restarted?
• Which command is used to execute an interactive shell inside a running container in a Kubernetes pod?
• In distributed systems, which protocol is used to achieve consensus on the cluster state despite failures?
• What are Vertical Pod Autoscalers (VPA) in Kubernetes used for?
• What does maxSurge: 25% signify?
• What is the effect of changing the image of a Deployment?
• What is the difference between a container and a container image?
• What does the KCNA curriculum include that is now a dedicated qualification?
• What is the function of the Logical AND operator (&&) in a Dockerfile?
• What is the smallest deployable unit of compute in Kubernetes?
• One of the challenges posed by Serverless solutions from a Cloud Native viewpoint?
• Open standards provide what benefit in terms of tooling and interoperability?
• In StatefulSets, which service type is used to enable DNS-based addressing without a cluster IP?
• How do nodes in a highly available Kubernetes configuration connect to the API server?
• What is a digest in the context of container images?
• What is the default behaviour of a pod in a Kubernetes cluster that does not have any NetworkPolicies applied to it?
• Which component stores the cluster state in Kubernetes?
• How can you see logs of a particular container from a multi-container pod?
• What is the primary benefit of Kubernetes in orchestration?
• Which LABEL is used to mention the author of the container?
• What does the WORKDIR instruction do in a Dockerfile?
• Which Autoscaling type reacts when metrics hit a given threshold?
• What pattern is commonly used in the Data Plane of a Service Mesh?
• Which of the following is not part of CRUD in Kubernetes API operations?
• What is the primary role of the Prometheus Adapter?
• What setting allows a ConfigMap to be prevented from being modified after creation?
• What is the primary purpose of the LABEL instruction in a Dockerfile?
• What does the "CN" stand for in the subject line of a Kubernetes certificate?
• Which service type is typically provided by the cloud provider and may vary by environment?
• Which automation tool is primarily focused on Infrastructure as Code (IAC)?
• Which service type makes services technically available outside the cluster if node IPs are externally accessible?
• What is the significance of the kube-prometheus-operator project?
• How does Kubernetes use labels for resource selection?
• What is the recommended object for running applications in a Kubernetes cluster?
• How can you check a Kubernetes ConfigMap's values?
• Which object represents a user's claim to storage resources defined by a PersistentVolume?
• Deleting a Namespace has which of the following effects?
• Which statement best describes a container image?
• Why is service discovery important in Cloud Native applications?
• What is a container image?
• Which item is considered part of the Kubernetes control plane?
• According to the Crossing the Chasm model, which group is most susceptible to risk and will wait for market adoption to increase before utilizing a project themselves?
• Which option allows you to view all the available Docker command parameters?
• What is the purpose of the CloudEvents specification?
• OpenTelemetry and OpenTracing operate at which layer of software architecture?
• The 'Crossing the Chasm' concept in the CNCF project maturity model represents which transition?
• In case of a Deployment failure, which Kubernetes command can be used to revert to a functioning version?
• Which Kubernetes component handles cloud provider integration tasks such as provisioning resources like load balancers?
• What is the purpose of Role Based Access Control (RBAC) in Kubernetes?
• What is a key characteristic of Serverless architecture?
• What is a key difference in using Serverless computing services as compared to managing your own servers?
• How can you override the default command in a Docker container when running it?
• Which component increases or decreases the Kubernetes cluster size by adding or removing nodes based on usage?
• Which component exposes the Kubernetes API for clients?
• Which format would be considered user-friendly for outputting logging data while supporting complex and hierarchical data?
• What does the command kubectl auth can-i * * check do?
• What is the function of Horizontal Pod Autoscalers (HPA) in Kubernetes?
• Setting allowPrivilegeEscalation to false in a container's securityContext prevents what?
• Where is the cluster configuration for kubectl stored?
• Which statement best describes Infrastructure as Code (IAC) in cloud-native automation?
• Which of the following is a recognized component of a Kubernetes node?
• In a multistage Dockerfile, which option is used with the COPY instruction to copy artifacts from a previous stage?
• What is the difference between Secrets and ConfigMaps in Kubernetes?
• Which factor is least relevant to autoscaling decisions?
• What command is used to create a secret in Kubernetes?
• What Kubernetes component exposes an application running on Pods as a network service?
• Does the Kubernetes network model allow pods to communicate across the cluster without NAT?
• What open standard allows for the creation of OCI compliant container images?
• What factors does the CNCF TOC consider to establish a project's maturity?
• Which of the following is a common option for Pod Admission Controllers in Kubernetes?
• What is the command to create a port-forward tunnel in Kubernetes for testing purposes?
• What does a CloudOps Engineer primarily focus on?
• How can one reduce the overall cost of the KCNA exam?
• If you delete a Deployment, what happens to its linked ReplicaSets?
• Which pattern is used to intercept traffic in the data plane of a Service Mesh?
• In a Dockerfile, which instruction is commonly used to produce a new layer by executing build-time commands?
• Which component serves as the reference implementation for the OCI runtime specification?
• What does the kubeconfig file contain?
• Keda uses which construct to define scaling rules?
• What command will change the current context to use a specific namespace?
• What does the "O" stand for in the subject line of a Kubernetes certificate?
• What is the primary function of a Data Engineer's role?
• What is the function of the Kube-Scheduler in the Kubernetes architecture?
• How can Helm Charts be packaged for distribution?
• Which is a primary benefit of designing applications in a Cloud Native manner?
• Which of the following open source solutions provide Serverless functionality on top of Kubernetes?
• What is Autoscaling?
• In the CNCF Landscape, projects are categorized into Sandbox, Incubated, and Graduated stages. Which stage indicates the most mature projects?
• What is the primary purpose of a Persistent Volume (PV) in Kubernetes?
• What is the primary function of the kube-scheduler in Kubernetes?
• What software did Docker Inc donate to the Open Container Initiative, marking the first OCI open standard?
• Which body within CNCF is responsible for evaluating project maturity?
• What does CNCF stand for?
• In autoscaling, which topic involves changing the configuration of the underlying resource rather than adding or removing resources?
• Which capability is essential for Kubernetes cost monitoring to help optimize spend?
• What is the role of Admission Controllers in Kubernetes API?
• How does the concept of Least Privilege contribute to Cloud Native security?
• What is the zero trust security model in a Cloud Native context?
• Provisioned concurrency in Serverless offerings refers to?
• What is the name of the default namespace in Kubernetes?
• Which of the following is a key function of Terraform in Cloud Native Automation?
• Which statement about CloudEvents usage is most accurate?
• Which autoscaling method could use AI and Machine Learning to scale in anticipation of demand?
• Which resource is created to manage the replicas for a Deployment?
• Which CNCF maturity sequence is correct?
• What will happen to resources inside a namespace if the namespace is deleted?
• How do you view the logs of a specific pod in Kubernetes?
• What is the purpose of Certificate Authority (CA) in Kubernetes?
• What is the purpose of the -rm option when running a Docker container?
• Which statement about the Kube-Proxy is NOT true?
• In Kubernetes, the data inside a Secret is typically stored in what form?
• Which of the following correctly represents the hierarchy of Kubernetes components, from broadest to most specific?
• What is the purpose of the adduser command in a Dockerfile?
• Kube-State-Metrics gathers state metrics about Kubernetes objects via which API?
• Which stage precedes Graduated in the CNCF project maturity lifecycle?
• What is a significant advantage of using ConfigMaps in Kubernetes?
• Which statement describes the benefit of detecting cloud anomalies in cost management?
• What is a Counter in the context of Cloud Native Observability?
• In Kubernetes, what is a Pod?
• What happens when you roll back to a specific revision of a Deployment?
• Setting emptyDir.medium to Memory in Kubernetes configures the volume as what?
• Which of the following is NOT one of the main operations employed by the Kube-Scheduler?
• What does the maxUnavailable: 25% setting signify?
• Which statement about a container image is accurate?
• What happens when you delete a Kubernetes Deployment?
• Which statement best describes the KCNA certification in the Kubernetes and Cloud Native learning path?
• What is the main advantage of using Docker Desktop compared to traditional Docker?
• Which tool is designed for vulnerability and misconfiguration scanning in Kubernetes clusters?
• Which Dockerfile instruction ensures a specific command runs when a container starts?
• What is a container registry?
• What is the purpose of Kubernetes Secrets?
• What is the primary role of the Node-exporter?
• What is chroot?
• How would you start a pod using a specific image and name the pod 'web'?
• What was Docker originally called?
• In a service mesh, what is the role of the Control Plane?
• What is the difference between the CMD and RUN instructions in a Dockerfile?
• Which Kubernetes feature allows you to revert to an older version of an application during a problematic update?
• What is the primary focus of a Security Engineer?
• Which component is NOT a Kubernetes control plane component?
• When does the Kubernetes Kube-Scheduler determine the node placement for a pod?
• What is the primary purpose of the Service Mesh Interface (SMI) in Kubernetes?
• Which specification outlines how a filesystem bundle should be packaged into an image?
• Which component is critical for enforcing network policies at the node level in Kubernetes?
• What is the primary focus of FinOps in an organization?
• Which statement best describes Continuous Delivery in the context of CI/CD?
• Which of the following is not a feature of Container Orchestration?
• What do EndPoints in Kubernetes represent?
• What is the function of Docker Extensions in Docker Desktop?
• In a Headless service, how does DNS resolution typically represent the endpoints?
• In a Kubernetes Pod, which feature runs tasks that must complete successfully before the main application containers start?
• Which command is used to create an RSA private key?
• What is a significant advantage of microservices in cloud-native applications?
• Which statement best describes the purpose of a Kubernetes Job?
• Which component is responsible for spawning and running containers in a Kubernetes architecture?
• How could effective use of Kubernetes labels contribute to better cloud cost management?
• Which option correctly places the default service account as the Pod's automatically assigned account when none is specified?
• CRD stands for what in Kubernetes?
• Which component is commonly used to isolate Docker on non-Linux hosts?
• What is a potential disadvantage of Serverless architecture?
• What is a tag in the context of container images?
• Which artifact is produced by packaging a Helm Chart?
• What is the best place to check for changes in the KCNA exam or curriculum?
• Admission Controllers are invoked after which checks in the API request lifecycle?
• What does the kubectl explain job.spec command do?
• If partition is set to 0 in a StatefulSet's updateStrategy, what does this imply about the update process?
• Docker was originally called DotCloud. Which project name preceded Docker?
• Which component is essential for enforcement of NetworkPolicies in Kubernetes?
• In a StatefulSet, how does each pod manage its storage?
• Vertical Pod Autoscalers (VPA) adjust which pod characteristics?
• Which role is commonly seen to crossover with DevOps due to overlapping skillsets?
• Which statement describes Right Sizing in cloud computing?
• What is Continuous Deployment?
• How many namespaces were originally added to the Linux kernel in 2002?
• In Kubernetes, what does an 'Ingress' rule in a NetworkPolicy define?
• Which of the following is considered a component of a Kubernetes node?
• What does the parameter parallelism: 5 signify in a Kubernetes Job specification?
• When you run docker run with an image name (e.g., ubuntu) without additional options, what happens?
• Which order best represents the typical processing sequence for a Kubernetes API request?
• Which command allows you to view the YAML declaration specification of a Kubernetes object from the command line?
• Which Kubernetes object provides declarative updates for applications and manages the lifecycle of pod templates and replica counts?
• Why is Docker a good example in understanding Open Standards?
• What is a key consideration when designing applications or infrastructure in cloud native practices?
• Which of these is a means of expanding Kubernetes to have functionality outside of core functionality?
• Which scaling approach increases capacity by adding more identical instances rather than resizing existing ones?
• If you want to quickly list all available API resources in your current Kubernetes cluster from the command line, which command would you use?
• In large clusters, what protocol is recommended to handle user authentication against external identity providers?
• Who might be able to receive assistance for the KCNA exam from the Linux Foundation or CNCF?
• Which statement best describes the relationship between microservices and agility in cloud-native architectures?
• How is the KCNA exam format described?
• In a StatefulSet's updateStrategy, what is the purpose of the 'partition' value?
• How do users typically interact with the Kubernetes API?
• What operational benefits can be derived from the effective use of labels in a Kubernetes environment?
• How can you monitor a Kubernetes Deployment's update in real time?
• How would you specifically define a Headless Service in a Kubernetes YAML specification?
• What was the change in CNCF's terminology to avoid confusion with other projects?
• What is a drawback of having too many layers in a container image?
• Which command is used to create a Kubernetes job named 'calculatepi'?
• Which feature of Deployments ensures the number of Pods is as expected in case of a Pod crash or deletion?
• What feature allows you to extend the Kubernetes API by defining new resource types?
• Which statement about Roles and ClusterRoles is true?
• In a StatefulSet's rolling update, when partition is set to 3, which pods are eligible to be updated first?
• What is CRD primarily used for in Kubernetes?
• Which statement best describes the primary function of a Cloud Architect?
• Who proctors the KCNA exam when taken remotely?
• What specification does the Open Container Initiative outline for running a filesystem bundle?
• Which of the following is considered a component of the Kubernetes control-plane?
• Prometheus Adapter serves as a bridge between Kubernetes metrics and Prometheus. Which option best describes this role?
• What is the purpose of labeling in Kubernetes?
• How does Serverless architecture handle concurrency?
• Which automation tool is best described as a versatile toolset that can assist with container lifecycles, application lifecycles, and infrastructure deployment?
• Which protocol is recommended for enhanced authentication in large-scale Kubernetes deployments?
• When does the Kube-Scheduler assign a pod to a node?
• Init Containers run before the main application containers start in a Pod.
• Which Linux namespace is the default shared in a Kubernetes Pod?
• If the --authorization-mode flag is not specified when starting the Kubernetes API server, what default mode is used?
• Which service type uses an internal IP accessible only within the cluster?
• What is PromQL primarily used for in Prometheus?
• How are permissions assigned to a user in Kubernetes using RBAC?
• Which statement best describes Horizontal Scaling?
• What is a significant advantage of using autoscaling in cloud-native patterns?
• What is the function of the 'docker run' command followed by an image name (e.g., 'ubuntu')?
• What is a primary advantage of Docker Buildx over Docker Build?
• What are the two main components of a Service Mesh?
• KCNA is described as a certification that broadens learning opportunities prior to more advanced Kubernetes credentials.
• How do you run a command inside a specific container in a running pod?
• Which two open source projects provide Serverless functionality on Kubernetes?
• Which statement about the Controller-Manager is NOT accurate?
• What type is assigned when creating a generic secret in Kubernetes?
• Which component of Kubernetes uses the API to track the state of pods and nodes, and to schedule pods onto nodes?
• What does TOC stand for in CNCF?
• Which statement best describes docker rm?
• What is the purpose of the Open Container Initiative's Distribution Specification?
• Which option should you use to automatically remove a container after it exits?
• Which statement best describes the cost implication of unused resources in cloud environments?
• What does Docker Desktop use to run an isolated instance for Docker?
• What is the purpose of the "i" flag when running the 'docker run' command?
• Which statement about the Cloud-Controller-Manager is NOT accurate?
• In a Service Mesh, which plane handles policy and configuration?
• Which pillar would be most useful for predicting future resource usage?
• Which trio forms the three fundamental pillars of Cloud Native Observability?
• What is the command used to validate the Docker version and configuration?
• Which Kubernetes security feature was deprecated in version 1.21 and removed in version 1.25?
• What are the three crucial stages that a request to the Kubernetes API goes through in the context of security and policy enforcement?
• What does the kubectl top command do in Kubernetes?
• Which default namespace hosts cluster-level components such as the API server and controllers?
• Which resource stores sensitive information such as passwords, tokens, and keys?
• What is the primary goal of the Service Mesh Interface (SMI)?
• What is a significant risk associated with using Spot Instances in cloud computing?
• Which Kubernetes service type is dependent on your Kubernetes offering and may vary significantly between On-Prem and Cloud?
• What does the command 'kubectl expose' do in Kubernetes?
• If a PersistentVolume has a Reclaim Policy of Delete and its associated PVC is deleted, what happens to the underlying storage?
• What role do Alerts play in Cloud Native Observability?
• Which Kubernetes service is only accessible within the cluster?
• What is the purpose of running a container as a non-root user?
• How could Ansible facilitate Cloud Native automation?
• Which RBAC component binds a user or group to a ClusterRole for cluster-wide permissions?
• Which command is used to remove a Docker container?
• What happens to the data volume if a pod in a StatefulSet is deleted and recreated?
• In terms of core abstractions provided by Kubernetes for service networking, how many types of services are primarily defined?
• What is the effect of setting spec.clusterIP: None in a Service YAML?
• In the GitOps paradigm for Kubernetes, which tool is designed to ensure that the cluster state matches the configuration stored in a Git repository?
• What is the primary aim of autoscaling in cloud-native apps?
• What does a ClusterRole in Kubernetes define?
• Which set of characteristics defines a Cloud Native Application?
• What is the primary function of Admission Controllers in Kubernetes?
• What is a key benefit of using Kubernetes Namespaces?
• What are the two key ingredients that Docker brought together to create its containerization solution?
• What is the main objective of the DevOps Engineer role?
• Which of the following best captures the CNCF's overarching goal?
• In cost optimization, which action directly aligns resource capacity with actual demand?
• How can CloudEvents be used according to the CloudEvents specification?
• What is the purpose of using a volume in Docker?
• What is the purpose of the -d option in the command 'docker run -d --rm -P nginx'?
• What is the primary characteristic of ephemeral storage in Kubernetes?
• Which language is most typically used for creating a custom scheduler in Kubernetes?
• If completions is 20 and parallelism is 5, how many pods can run in parallel at once?
• When a Deployment's image is updated, what is created to track the new version?
• What does 'Self Healing' refer to in cloud-native practices?
• Which statement describes how a PersistentVolumeClaim is typically used in Kubernetes?
• What is the primary function of Container Orchestration?
• Which practice best reduces blast radius by granting only the permissions needed to each component or user?
• Which statement best describes the difference between Continuous Delivery and Continuous Deployment?
• Which practice aligns with the Cloud Native principle of Speed, Efficiency and Cost Saving?
• During the Filtering stage of the Kube-Scheduler's process, what happens?
• Which role places a heavier emphasis on reliability, including uptime, availability, scalability, resilience, and robustness?
• In RBAC, which binding associates a user or group to a ClusterRole?
• When a CronJob is deleted, what happens to the associated jobs and pods?
• What does SMI stand for in the context of Service Meshes?
• Which command can be used to create a Kubernetes ConfigMap with specific values using the CLI?
• What is the significance of the CNCF Landscape page?
• What is the purpose of Helm Charts in Kubernetes?
• Which command would you use to inspect a ConfigMap's details?
• What is the container engine being used by Docker?
• What does CRD stand for in the context of Container Orchestration?
• What is the difference between a digest and an image ID?
• Which of the following is NOT a default Kubernetes namespace?
• Which factor is NOT considered by the TOC when assessing a project's maturity?
• How can a pod be configured to use a ConfigMap's values?
• Which package manager is used in Alpine Linux?
• Who was the original creator of Prometheus before it was donated to CNCF?
• Which of the following best describes what Kubernetes Secrets can contain?
• What is a key benefit of using StatefulSets for stateful applications in Kubernetes?
• Which data format is described as user-friendly for logging and supports hierarchical data?
• Which stage signifies the highest level of enterprise acceptance in CNCF maturity?
• Which instruction defines the default command that runs when a container starts if no command is provided?
• What best describes a Headless service's behavior?
• Open standards enable what outcome in terms of adoption and collaboration?
• Which resource stores non-secret configuration data?
• How does a NetworkPolicy in Kubernetes become effective?
• Which storage type in Kubernetes is typically allocated for short-lived data that doesn't survive pod restarts?
• What does the role of a Full Stack Developer encompass?
• What is the main purpose of the Kubernetes API?
• Which Dockerfile instruction would you use to set the initial working directory for subsequent instructions?
• What is the smallest deployable unit you create or deploy in Kubernetes?
• What characteristic of Metrics makes them essential for Observability?
• Which command runs a pod in a specific namespace named 'mynamespace' in Kubernetes?
• What is a Headless service in Kubernetes?
• Which statement describes the relationship between CronJobs and Job objects?
• What is the purpose of automation in a Cloud Native application?
• Which statement about Kubernetes Namespaces is true?
• What is the primary purpose of Observability in Cloud Native systems?
• In a Kubernetes Job, what does the parameter completions: 20 signify?
• Which technologies are highlighted as part of KCNA’s dedicated qualification?
• Which Kubernetes version introduced a stable feature to make a ConfigMap immutable?
• Which two aspects of Serverless computing are critical to understand from a cost perspective?
• What is a primary downside of using Spot Instances for workloads?
• What is the distinguishing feature of a Headless service in Kubernetes?
• Which option is NOT a primary service type in Kubernetes?
• Which command is used to create a ConfigMap in Kubernetes from a file containing key-value entries?
• Which Kubernetes resource is used to persist data beyond the lifecycle of a pod?
• What is the purpose of the 'kube-system' namespace in Kubernetes?
• Which command lists all resources across all namespaces in a single view?
• How is ETCD used in the Kubernetes architecture?
• In Cloud Native Observability, what are Logs primarily used for?
• Which aspect is NOT directly addressed by SMI API specifications?
• Which statement best describes a running container?
• How can a new namespace be created in Kubernetes?
• Which scenario best fits the use of StatefulSets?
• What does the term 'Auto' in Autoscaling refer to?
• What is the default Kubernetes service that establishes a service with an internal IP address reachable only within the cluster?
• Which command is used to scale the number of Deployment replicas?
• In a multistage Dockerfile, how can you copy a binary from one stage to another?
• Which command would you use to view the Docker version information?
• Which command shows all containers, including those that have exited?
• In CNCF, SIG stands for which term?
• Which Kubernetes object maintains a stable set of replica Pods and enables self-healing?