Practice for the Kubernetes and Cloud Native Associate (KCNA) exam with 16 exam-style practice questions, instant answer reveals, and concise explanations of every correct answer. Topics include: What is the reference implementation of the Open Container Initiative (OCI) runtime specification?. Follow @CertPunch and visit certpunch.com for more certification practice exams and study content.
Prefer hands-on? Take this round as an interactive practice test — answer every question, get instant feedback, and see your score: Start the Kubernetes and Cloud Native Associate (KCNA) practice test →
What you will practice
- What is the reference implementation of the Open Container Initiative (OCI) runtime specification?
- In the context of cloud native environments, which persona primarily focuses on optimizing cloud costs and fi…
- Which of the following is a lightweight container runtime specifically designed for Kubernetes, conforming to…
- Which part of the Kubernetes cluster is responsible for overall cluster management, including coordinating wo…
- In Kubernetes, which component is primarily responsible for managing a Node?
- During the phase when container images are being downloaded for a Pod in Kubernetes, what state is the Pod ty…
Answers and explanations
Tap a question to expand the answer and the exam reasoning. Try to commit to your own pick first.
Q1. What is the reference implementation of the Open Container Initiative (OCI) runtime specification?
Answer: C. runc
The correct answer is runc because it is the CLI reference implementation of the OCI runtime specification. For the KCNA exam, remember that Docker and containerd are higher-level runtimes, whereas runc actually does the container creation.
Q2. In the context of cloud native environments, which persona primarily focuses on optimizing cloud costs and financial management?
Answer: C. FinOps
The correct answer is FinOps because this persona focuses specifically on cloud financial management and cost optimization. DevOps is a strong distractor, but it focuses on delivery and operations workflows rather than financial accountability.
Q3. Which of the following is a lightweight container runtime specifically designed for Kubernetes, conforming to the Container Runtime Interface (CRI)?
Answer: C. CRI-O
The correct answer is CRI-O because it was built specifically as a lightweight Kubernetes runtime implementing the Container Runtime Interface. While containerd also conforms to the CRI, it serves as a broader core container runtime rather than a Kubernetes-exclusive one.
Q4. Which part of the Kubernetes cluster is responsible for overall cluster management, including coordinating worker nodes?
Answer: B. Control Plane
The correct answer is the Control Plane since it makes global cluster decisions and manages the overall cluster state. The scheduler and controller manager are strong distractors, but they are individual components running within that control plane.
Q5. In Kubernetes, which component is primarily responsible for managing a Node?
Answer: B. Kubelet
The correct answer is the Kubelet because it acts as the primary node agent ensuring containers run in their intended state. The API server is a distractor that manages the entire cluster centrally rather than managing individual nodes locally.
Q6. During the phase when container images are being downloaded for a Pod in Kubernetes, what state is the Pod typically in?
Answer: B. Pending
The correct answer is Pending because this state indicates the pod has been accepted but containers are not yet running, often due to image pulls. Initializing is a strong distractor, but Kubernetes does not use it as a primary pod phase.
Q7. In a cloud-native organisation, which role is primarily responsible for building and maintaining the underlying platform infrastructure, enabling application developers to deploy and run their services efficiently?
Answer: C. Platform Engineers
The correct answer is Platform Engineers because they design and maintain the internal developer platform enabling application deployment. DevOps is a strong distractor, but it focuses broadly on culture and pipelines rather than building infrastructure products.
Q8. What is the primary purpose of kube-state-metrics in a Kubernetes cluster?
Answer: B. To generate and expose cluster state data
The correct answer is to generate and expose cluster state data because kube-state-metrics listens to the API server and outputs Prometheus metrics. A strong distractor is monitoring network traffic, which is handled by components like the CNI or network observability tools.
Q9. A cloud native professional spends their time organizing local meetups to demonstrate CNCF project usage, giving talks at conferences to promote cloud native technologies, and mentoring new contributors in the community. Based on these act…
Answer: B. CNCF Ambassador
The CNCF Ambassador role matches these activities because ambassadors actively organize meetups, speak at conferences, and mentor new contributors. For the exam, remember that TOC members manage technical projects, while ambassadors focus on community advocacy.
Q10. What statement is correct regarding the Open Policy Agent (OPA) in the context of Kubernetes?
Answer: B. Kubernetes can use OPA to validate requests and apply policies across the cluster
Kubernetes integrates OPA as an admission controller to validate API requests and enforce cluster-wide policies. OPA is not a service mesh or load balancer; it functions purely as a general-purpose policy engine used for compliance and governance.
Q11. Which of the following is a CNCF project that focuses on providing monitoring and alerting capabilities in a cloud-native environment?
Answer: B. Prometheus
Prometheus is the correct choice because it is the primary CNCF project designed for cloud-native monitoring and alerting via a time-series database. Do not confuse it with Envoy, which handles network proxying, or Helm, which packages applications.
Q12. Which kubectl command applies a label to generate warnings for Pods in a namespace that violate the baseline Pod Security Standards?
Answer: B. kubectl label –overwrite ns example pod-security.kubernetes.io/warn=baseline
Pod Security Admission configurations are applied to namespaces using standard labels, specifically 'pod-security.kubernetes.io/warn=baseline'. Avoid using annotations for this, as the admission controller specifically reads security configurations from namespace labels.
Q13. In Kubernetes, what is an Endpoint primarily used to represent?
Answer: C. The IP addresses and ports of the Pods backing a Service
Endpoints represent the actual IP addresses and ports of the Pods backing a Service. They are crucial for keeping network routing updated as Pods scale up or down, ensuring traffic reaches healthy targets.
Q14. In Kubernetes, what are Service Endpoints primarily used for?
Answer: C. Tracking the IP addresses and ports of Pods associated with a Service
Service Endpoints track the IP addresses and ports of associated Pods to enable accurate traffic routing. Endpoints update dynamically as Pods are created or terminated, ensuring clients always reach available application instances.
Q15. In a Kubernetes cluster, which component is responsible for routing traffic for services and managing IP rules?
Answer: B. Kube-Proxy
Kube-Proxy runs on each node to handle packet routing and manage IP table rules for Services. The API server handles state management, while etcd provides the backing data store for the cluster.
Q16. In a Kubernetes cluster architecture, which component acts as the central management entity, processing RESTful requests to manage and control the various resources within the cluster?
Answer: C. Kubernetes API Server
The Kubernetes API Server acts as the central management hub, processing all RESTful requests to manage cluster resources. Every component, including kubelet and controller manager, must communicate through the API server.
More Kubernetes and Cloud Native Associate (KCNA) drills and other practice exams are on @CertPunch. New rounds drop every few days at certpunch.com.