Practice for the Kubernetes and Cloud Native Associate (KCNA) exam with 16 exam-style practice questions, instant answer reveals, and concise explanations of every correct answer. Topics include: Which Kubernetes resource defines the unit of work that the scheduler assigns to a node and consists of one or more tigh. Follow @CertPunch and visit certpunch.com for more certification practice exams and study content.
Prefer hands-on? Take this round as an interactive practice test — answer every question, get instant feedback, and see your score: Start the Kubernetes and Cloud Native Associate (KCNA) practice test →
What you will practice
- Which Kubernetes resource defines the unit of work that the scheduler assigns to a node and consists of one o…
- Which of the following describes the Kubernetes ClusterIP service?
- When decommissioning a Kubernetes node during a security incident, which method ensures minimal application d…
- What are the primary modes of service discovery within a Kubernetes cluster?
- When using kubectl logs, which command-line flag is used to specify a particular container inside a pod?
- When categorizing cloud-native tools for microservices architectures, Istio is primarily identified as which…
Answers and explanations
Tap a question to expand the answer and the exam reasoning. Try to commit to your own pick first.
Q1. Which Kubernetes resource defines the unit of work that the scheduler assigns to a node and consists of one or more tightly coupled containers?
Answer: C. Pod
A Pod is the fundamental unit that the Kubernetes scheduler works with. Deployments and ReplicaSets manage Pods but are not the actual units assigned to nodes.
Q2. Which of the following describes the Kubernetes ClusterIP service?
Answer: D. Provides an internal virtual IP address only reachable by workloads within the Kubernetes environment
A ClusterIP service provides an internal virtual IP address only reachable by workloads within the Kubernetes cluster. NodePort and LoadBalancer types expose applications to external traffic.
Q3. When decommissioning a Kubernetes node during a security incident, which method ensures minimal application disruption by gracefully terminating pods and enforcing budget constraints?
Answer: D. Perform a controlled drain with kubectl drain and PDB checks
Performing a controlled drain with kubectl drain enforces Pod Disruption Budgets to minimize disruptions. Force-deleting or applying a NoExecute taint bypasses these safety constraints.
Q4. What are the primary modes of service discovery within a Kubernetes cluster?
Answer: B. Environment Variables and DNS
Environment variables and DNS are the primary modes of service discovery within a Kubernetes cluster. The built-in DNS service is heavily relied upon for name resolution across namespaces.
Q5. When using kubectl logs, which command-line flag is used to specify a particular container inside a pod?
Answer: C. –container or -c
The –container or -c flag specifies a particular container inside a pod when using kubectl logs. The –namespace or -n flag targets the broader resource location.
Q6. When categorizing cloud-native tools for microservices architectures, Istio is primarily identified as which type of technology?
Answer: D. Service Mesh
Istio is primarily identified as a service mesh technology that manages traffic and security for microservices. Container orchestration is handled by platforms like Kubernetes.
Q7. In Kubernetes, which object is most suitable for deploying stateless applications?
Answer: C. Deployment
A Deployment manages a set of identical stateless pods, providing robust features like rolling updates and horizontal scaling. StatefulSet is the strongest distractor, but it is explicitly designed for stateful workloads requiring persistent identities and stable storage.
Q8. Which open-source cloud-native orchestrator can be used to automate the deployment and management of Ceph?
Answer: D. Rook
Rook is a cloud-native storage orchestrator that translates Kubernetes storage requirements into automated management of distributed storage systems. Kubernetes provides the general container orchestration layer, but Rook acts as the specialized operator handling the Ceph cluster lifecycle.
Q9. In Kubernetes, which tool is specifically designed for orchestrating and managing complex parallel workflows and batch jobs?
Answer: D. Argo Workflows
Argo Workflows is a custom resource definition engine built specifically to orchestrate parallel, multi-step pipelines natively inside Kubernetes. Kubernetes Jobs handle basic batch execution, but they lack the advanced dependency graphing needed for complex, parallel workflow orchestration.
Q10. In Kubernetes, what is the primary resource that bundles containers with shared storage and network settings to form a single deployable instance?
Answer: D. A Pod managing one or more containers with common resources
A Pod is the smallest deployable computing unit in Kubernetes, encapsulating one or more tightly coupled containers that share the same network and storage namespaces. ReplicaSets manage Pod scaling, but the Pod itself serves as the foundational shared resource bundle.
Q11. In Kubernetes, how are the container specifications in Deployments and StatefulSets similar?
Answer: C. Both Deployments and StatefulSets use the same container spec within their pod templates
Both Deployments and StatefulSets embed identical container specifications inside their respective Pod templates, standardizing runtime configuration. The primary difference lies in their rollout strategies and network identity handling, rather than any variation in how container images and commands are defined.
Q12. What is a Dockerfile in the context of containerization?
Answer: C. A text document containing all the commands to build a Docker image
A Dockerfile is a text document containing all the sequential commands needed to assemble a custom container image, such as setting base layers and copying files. Helm charts handle deployment orchestration, whereas the Dockerfile strictly dictates image creation.
Q13. Which open standard provides a specification for container images and runtimes, ensuring consistency and compatibility in the container ecosystem?
Answer: C. Open Container Initiative (OCI)
The Open Container Initiative establishes the formal specifications for container images and runtimes. Docker and Kubernetes utilize these OCI standards, but neither defines the foundational open specification itself.
Q14. What is the recommended approach for setting up continuous deployment of multiple applications using Argo CD?
Answer: B. Defining an ApplicationSet that uses a generator to target multiple applications from a single configuration.
ApplicationSet uses generators to template and deploy multiple Argo CD Applications declaratively. Creating individual Application resources works but introduces duplication, defeating the purpose of scalable GitOps automation.
Q15. In Prometheus, which metric type represents a value that can arbitrarily go up or down, like temperature or memory usage?
Answer: C. Gauge
A gauge represents metrics that can arbitrarily increase or decrease, such as memory usage. Counters only increment, making them suitable for tracking total events, not fluctuating current states.
Q16. Which tool is typically used in combination with Prometheus to visualize and analyze data?
Answer: B. Grafana
Grafana is the industry standard visualization tool for creating dashboards from Prometheus time-series data. While Jenkins handles automation, it lacks the specialized querying and dashboarding features required for metrics analysis.
More Kubernetes and Cloud Native Associate (KCNA) drills and other practice exams are on @CertPunch. New rounds drop every few days at certpunch.com.