Linux Foundation KCNA Exam Practice Questions (P. 1)
- Full Access (161 questions)
- Six months of Premium Access
- Access to one million comments
- Seamless ChatGPT Integration
- Ability to download PDF files
- Anki Flashcard files for revision
- No Captcha & No AdSense
- Advanced Exam Configuration
Question #1
What native runtime is Open Container Initiative (OCI) compliant?
- ArunCMost Voted
- BrunV
- Ckata-containers
- Dgvisor
Correct Answer:
A
A

Absolutely! runC is the fundamental choice here as it’s straight-up OCI compliant, focusing on spinning up containers according to the standards set by the Open Container Initiative. It’s essentially the core engine that gets this job done under the hood. This makes it critical for anyone diving into container architecture since understanding these foundational tools and their compliance status is key. RunC sets the stage for other tools and frameworks to build upon, ensuring alignment with OCI specs.
send
light_mode
delete
Question #2
Which API object is the recommended way to run a scalable, stateless application on your cluster?
- AReplicaSet
- BDeploymentMost Voted
- CDaemonSet
- DPod
Correct Answer:
B
B

Deployments in Kubernetes are the best way to manage stateless applications that need scaling and rolling updates. They leverage ReplicaSets, yet they allow for more robust update mechanisms, rollback capabilities, and declarative configuration updates which make managing stateless applications more efficient and reliable compared to directly using ReplicaSets or Pods.
send
light_mode
delete
Question #3
A CronJob is scheduled to run by a user every one hour. What happens in the cluster when it's time for this CronJob to run?
- AKubelet watches API Server for CronJob objects. When it's time for a Job to run, it runs the Pod directly.
- BKube-scheduler watches API Server for CronJob objects, and this is why it's called kube-scheduler.
- CCronJob controller component creates a Pod and waits until it finishes to run.
- DCronJob controller component creates a Job. Then the Job controller creates a Pod and waits until it finishes to run.
Correct Answer:
D
D

The correct answer is D and it has a solid, straightforward explanation. When a CronJob is set to run, the CronJob controller gets triggered. Instead of directly creating a Pod, the CronJob controller spins up a Job. It's the Job controller's turn afterwards to handle the creation of the Pod necessary to execute the task. This two-step process ensures jobs from a CronJob are efficiently managed and tracked, aligning with Kubernetes' robust orchestration capabilities.
send
light_mode
delete
Question #4
What is the purpose of the kubelet component within a Kubernetes cluster?
- AA dashboard for Kubernetes Clusters that allows management and troubleshooting of applications.
- BA network proxy that runs on each node in your cluster, implementing part of the Kubernetes Service concept.
- CA component that watches for newly created Pods with no assigned node, and selects a node for them to run on.
- DAn agent that runs on each node in the cluster. It makes sure that containers are running in a Pod.Most Voted
Correct Answer:
D
D

The kubelet is super critical because it operates on each node in your Kubernetes cluster, earnestly ensuring that containers are up and kicking within the Pods. It’s like having a diligent overseer on every node that keeps things ticking according to plans set out in the PodSpecs. This is essential for maintaining the desired state and consistent operations across all nodes.
send
light_mode
delete
Question #5
What is the default value for authorization-mode in Kubernetes API server?
- A--authorization-mode=RBAC
- B--authorization-mode=AlwaysAllowMost Voted
- C--authorization-mode=AlwaysDeny
- D--authorization-mode=ABAC
Correct Answer:
B
B

Absolutely right. When you fire up the Kubernetes API server without specifying the authorization mode, it defaults to "--authorization-mode=AlwaysAllow." This setup is basic, assuming no initial restrictions on requests processed by the server, ideal for specific test or low-security environments. It's essential to modify this in production environments to enforce authorization policies effectively, typically to something more secure like RBAC.
send
light_mode
delete
All Pages