Linux Foundation CKA Certified Kubernetes Administrator Exam Practice Test

Page: 1 / 14
Total 67 questions

Want more questions? Get Premium Access.
()

Question 1

Score: 4%

Context

You have been asked to create a new ClusterRole for a deployment pipeline and bind it to a specific ServiceAccount scoped to a specific namespace.

Task

Create a new ClusterRole named deployment-clusterrole, which only allows to create the following resource types:

* Deployment

* StatefulSet

* DaemonSet

Create a new ServiceAccount named cicd-token in the existing namespace app-team1.

Bind the new ClusterRole deployment-clusterrole lo the new ServiceAccount cicd-token , limited to the namespace app-team1.

AExplanation:
Solution:
Task should be complete on node k8s -1 master, 2 worker for this connect use command
[student@node-1] > ssh k8s
kubectl create clusterrole deployment-clusterrole --verb=create --resource=deployments,statefulsets,daemonsets
kubectl create serviceaccount cicd-token --namespace=app-team1
kubectl create rolebinding deployment-clusterrole --clusterrole=deployment-clusterrole --serviceaccount=default:cicd-token --namespace=app-team1

Answer : A

Question 2

Check to see how many worker nodes are ready (not including nodes tainted NoSchedule) and write the number to /opt/KUCC00104/kucc00104.txt.

AExplanation:
solution

Answer : A

Question 3

Monitor the logs of pod foo and:

Extract log lines corresponding to error

unable-to-access-website

Write them to /opt/KULM00201/foo

AExplanation:
solution

Answer : A

Question 4

Get list of all pods in all namespaces and write it to file ''/opt/pods-list.yaml''

AExplanation:
kubectl get po --all-namespaces > /opt/pods-list.yaml

Answer : A

Question 5

List the nginx pod with custom columns POD_NAME and POD_STATUS

AExplanation:
kubectl get po -o=custom-columns='POD_NAME:.metadata.name,
POD_STATUS:.status.containerStatuses[].state'

Answer : A

Question 6

Create a snapshot of the etcd instance running at https://127.0.0.1:2379, saving the snapshot to the file path /srv/data/etcd-snapshot.db.

The following TLS certificates/key are supplied for connecting to the server with etcdctl:

CA certificate: /opt/KUCM00302/ca.crt

Client certificate: /opt/KUCM00302/etcd-client.crt

Client key: Topt/KUCM00302/etcd-client.key

AExplanation:
solution

Answer : A

Question 7

From the pod label name=cpu-utilizer, find pods running high CPU workloads and write the name of the pod consuming most CPU to the file /opt/KUTR00102/KUTR00102.txt (which already exists).

AExplanation:
solution

Answer : A