Free KCNA Sample Questions — Kubernetes and Cloud Native Associate

Why do administrators need a container orchestration tool?

• A. To manage the lifecycle of an elevated number of containers
• B. To assess the security risks of the container images used in production
• C. To learn how to transform monolithic applications into microservices
• D. Container orchestration tools such as Kubernetes are the future

What component enables end users, different parts of the Kubernetes cluster, and external components to communicate with one another?

• A. kubectl
• B. AWS Management Console
• C. Kubernetes API
• D. Google Cloud SDK

What is the minimum of etcd members that are required for a highly available Kubernetes cluster?

• A. Two etcd members
• B. Five etcd members
• C. Six etcd members
• D. Three etcd members

Which of the following sentences is true about namespaces in Kubernetes?

• A. You can create a namespace within another namespace in Kubernetes
• B. You can create two resources of the same kind and name in a namespace
• C. The default namespace exists when a new cluster is created
• D. All the objects in the cluster are namespaced by default

What does CNCF stand for?

• A. Cloud Native Community Foundation
• B. Cloud Native Computing Foundation
• C. Cloud Neutral Computing Foundation
• D. Cloud Neutral Community Foundation

Which of the following statements is correct concerning Open Policy Agent (OPA)?

• A. The policies must be written in Python language
• B. Kubernetes can use it to validate requests and apply policies
• C. Policies can only be tested when published
• D. It cannot be used outside Kubernetes

What is the order of 4C’s in Cloud Native Security, starting with the layer that a user has the most control over?

• A. Cloud -> Container -> Cluster -> Code
• B. Container -> Cluster -> Code -> Cloud
• C. Cluster -> Container -> Code -> Cloud
• D. Code -> Container -> Cluster -> Cloud

What methods can you use to scale a deployment?

• A. With kubectl edit deployment exclusively
• B. With kubectl scale-up deployment exclusively
• C. With kubectl scale deployment and kubectl edit deployment
• D. With kubectl scale deployment exclusively

What is the primary mechanism to identify grouped objects in a Kubernetes cluster?

• A. Custom Resources
• B. Labels
• C. Label Selector
• D. Pod

What is the goal of load balancing?

• A. Automatically measure request performance across instances of an application
• B. Automatically distribute requests across different versions of an application
• C. Automatically distribute instances of an application across the cluster
• D. Automatically distribute requests across instances of an application

Which of the following is a valid PromQL query?

• A. SELECT * from http_requests_total WHERE job=apiserver
• B. http_requests_total WHERE (job="apiserver")
• C. SELECT * from http_requests_total
• D. http_requests_total(job="apiserver")

What is the correct hierarchy of Kubernetes components?

• A. Containers → Pods → Cluster → Nodes
• B. Nodes → Cluster → Containers → Pods
• C. Cluster → Nodes → Pods → Containers
• D. Pods → Cluster → Containers → Nodes

Which one of the following is an open source runtime security tool?

• A. lxd
• B. containerd
• C. falco
• D. gvisor

Which persona is normally responsible for defining, testing, and running an incident management process?

• A. Site Reliability Engineers
• B. Project Managers
• C. Application Developers
• D. Quality Engineers

In Kubernetes, if the API version of feature is v2beta3, it means that:

• A. The version will remain available for all future releases within a Kubernetes major version
• B. The API may change in incompatible ways in a later software release without notice
• C. The software is well tested. Enabling a feature is considered safe
• D. The software may contain bugs. Enabling a feature may expose bugs

What are the most important resources to guarantee the performance of an etcd cluster?

• A. CPU and disk capacity
• B. Network throughput and disk I/O
• C. CPU and RAM memory
• D. Network throughput and CPU

How does dynamic storage provisioning work?

• A. user requests dynamically provisioned storage by including an existing storage class in their PersistentVolumeClaim
• B. An administrator creates a storage class and includes it in their pod YAML definition file without creating a PersistentVolumeClaim
• C. pod requests dynamically provisioned storage by including a storage class and the pod name in their PersistentVolumeClaim
• D. An administrator creates a PersistentVolume and includes the name of the PersistentVolume in their pod YAML definition file

Which type of Service requires manual creation of Endpoints?

• A. LoadBalancer
• B. Services without selectors
• C. NodePort
• D. ClusterIP with selectors

The Kubernetes project work is carried primarily by SIGs. What does SIG stand for?

• A. Special Interest Group
• B. Software Installation Guide
• C. Support and Information Group
• D. Strategy Implementation Group

Kubernetes ___ allows you to automatically manage the number of nodes in your cluster to meet demand.

• A. Node Autoscaler
• B. Cluster Autoscaler
• C. Horizontal Pod Autoscaler
• D. Vertical Pod Autoscaler