CKA Exam Questions

Context: You have been asked to create a new ClusterRole for a deployment pipeline and bind it to a specific ServiceAccount scoped to a specific namespace. Task: Create a new Clust...

Next, restore an existing, previous snapshot located at /var/lib/backup/etcd-snapshot-previo us.db

Create a new NetworkPolicy named allow-port-from-namespace in the existing namespace echo. Ensure that the new NetworkPolicy allows Pods in namespace my-app to connect to port 9000...

Given an existing Kubernetes cluster running version 1.20.0, upgrade all of the Kubernetes control plane and node components on the master node only to version 1.20.1. Be sure to d...

Reconfigure the existing deployment front-end and add a port specification named http exposing port 80/tcp of the existing container nginx. Create a new service named front-end-svc...

First, create a snapshot of the existing etcd instance running at https://127.0.0.1:2379, saving the snapshot to /srv/data/etcd-snapshot.db.

Create a new NetworkPolicy named allow-port-from-namespace in the existing namespace echo. Ensure that the new NetworkPolicy allows Pods in namespace my-app to connect to port 9000...

Create a new nginx ingress resource as follows: • Name: ping • Namespace: ing-internal • Exposing service hi on path /hi using service port 5678

Schedule a pod as follows: • Name: nginx-kusc00401 • Image: nginx • Node selector: disk=ssd

Scale the deployment presentation to 6 pods.

Check to see how many nodes are ready schedulable (not including nodes tainted NoSchedule ) and write the number to /opt/KUSC00402/kusc00402.txt.

Create a persistent volume with name app-data , of capacity 1Gi and access mode ReadOnlyMany. The type of volume is hostPath and its location is /srv/app-data .

Create a new PersistentVolumeClaim • Name: pv-volume • Class: csi-hostpath-sc • Capacity: 10Mi Create a new Pod which mounts the PersistentVolumeClaim as a volume: • Name: web-serv...

Create a pod named kucc8 with a single app container for each of the following images running inside (there may be between 1 and 4 images specified): nginx + redis + memcached + co...

Monitor the logs of pod bar and: • Extract log lines corresponding to error file-not-found • Write them to /opt/KUTR00101/bar

Create a new PersistentVolumeClaim • Name: pv-volume • Class: csi-hostpath-sc • Capacity: 10Mi Create a new Pod which mounts the PersistentVolumeClaim as a volume: • Name: web-serv...

Add a sidecar container named sidecar, using the busybox image, to the existing Pod big-corp-app. The new sidecar container has to run the following command: /bin/sh -c tail -n+1 -...

A Kubernetes worker node, named wk8s-node-0 is in state NotReady. Investigate why this is the case, and perform any appropriate steps to bring the node to a Ready state, ensuring t...

Scale the deployment webserver to 3 pods. Set configuration context: [student@node-1] $ kubectl config use-context k8s

Add a sidecar container named sidecar, using the busybox Image, to the existing Pod big-corp-app. The new sidecar container has to run the following command: /bin/sh -c tail -n+1 -...

A Kubernetes worker node, named wk8s-node-0 is in state NotReady. Investigate why this is the case, and perform any appropriate steps to bring the node to a Ready state, ensuring t...

Schedule a Pod as follows: * Name: kucc1 * App Containers: 2 * Container Name/Images: o nginx o consul Set configuration context: [student@node-1] $ kubectl config use-context k8s

Schedule a Pod as follows: . Name: kucc1 . App Containers : 2 . Container Name/Images : redis Memcached

Scale the deployment webserver to 3 pods.

Create a new HorizontalPodAutoscaler (HPA) named apache-server in the autoscale namespace. This HPA must target the existing Deployment called apache-server in the autoscale namesp...

Schedule a Pod as follows: Name: kucc1 App Containers: 2 Container Name/Images: o nginx o consul

Schedule a Pod as follows: Name: kucc1 App Containers : 2 Container Name/Images : redis Memcached

Create a new Ingress resource as follows: - Name: echo - Namespace: sound-repeater

Create a new HorizontalPodAutoscaler (HPA) named apache-server in the autoscale namespace. This HPA must target the existing Deployment called apache-server in the autoscale namesp...

You manage a WordPress application. Some Pods are not starting because resource requests are too high. Your task is to prepare a Linux system for Kubernetes. Docker is already inst...

Create a new Ingress resource as follows: - Name: echo - Namespace: sound-repeater The availability of Service echoserver-service can be checked using the following command, which...

You manage a WordPress application. Some Pods are not starting because resource requests are too high. A WordPress application in the relative-fawn namespace consists of: A WordPre...

You must connect to the correct host. Failure to do so may result in a zero score. Context: You manage a WordPress application. Some Pods are not starting because resource requests...

You must connect to the correct host. Failure to do so may result in a zero score. Context: A legacy app needs to be integrated into the Kubernetes built-in logging architecture (i...

You must connect to the correct host. Failure to do so may result in a zero score. Context: Your cluster 's CNI has failed a security audit. It has been removed. You must install a...

You must connect to the correct host. Failure to do so may result in a zero score. Context: You manage a WordPress application. Some Pods are not starting because resource requests...

You must connect to the correct host. Failure to do so may result in a zero score. [candidate@base] $ ssh cka000037 Context A legacy app needs to be integrated into the Kubernetes...

You must connect to the correct host. Failure to do so may result in a zero score. [candidate@base] $ ssh Cka000046 Task First, create a new StorageClass named local-path for an ex...

You must connect to the correct host. Failure to do so may result in a zero score. [candidate@base] $ ssh Cka000022 Task Reconfigure the existing Deployment front-end in namespace...

You must connect to the correct host. Failure to do so may result in a zero score. [candidate@base] $ ssh cka000054 Context Your cluster 's CNI has failed a security audit. It has...

First, create a new StorageClass named local-path for an existing provisioner named rancher.io/local-path. Set the volume binding mode to WaitForFirstConsumer. Not setting the volu...

You must connect to the correct host. Failure to do so may result in a zero score. [candidate@base] $ ssh Cka000049 Task Perform the following tasks: Create a new PriorityClass nam...

Reconfigure the existing Deployment front-end in namespace spline-reticulator to expose port 80/tcp of the existing container nginx. Create a new Service named front-end-svc to exp...

Review and apply the appropriate NetworkPolicy from the provided YAML samples. Ensure that the chosen NetworkPolicy is not overly permissive, but allows communication between the f...

Perform the following tasks: Create a new PriorityClass named high-priority for user-workloads with a value that is one less than the highest existing user-defined priority class v...

Fix a single-node cluster that got broken during machine migration. First, identify the broken cluster components and investigate what breaks them. The decommissioned cluster used...

You must connect to the correct host. Failure to do so may result in a zero score. [candidate@base]$ $ ssh cka000059 Task Verify the cert-manager application has been deployed to y...

You must connect to the correct host. Failure to do so may result in a zero score. [candidate@base] $ ssh Cka000060 Task Install Argo CD in the cluster by performing the following...

SIMULATION Quick Reference ConfigMaps, Documentation Deployments, Namespace You must connect to the correct host . Failure to do so may result in a zero score. [candidate@base]$ $...

You must connect to the correct host. Failure to do so may result in a zero score. A MariaDB Deployment in the mariadb namespace has been deleted by mistake. Your task is to restor...