20:00Min. left

PDF|

Guide for KCNA: Kubernetes and Cloud Native Essentials

Quiz KCNA: Kubernetes and Cloud Native Essentials

Updated on 2026/06/06

PDF|

Guide for KCNA: Kubernetes and Cloud Native Essentials

Updated on 2026/06/06

Randomized | 10 Questions per Test | 20 Minutes | 70% to pass

Learning Mode

Free Test

Question: / 10

20:00Min. left

Question: / 10

4.6

Quiz

Question 1/101/10

What native runtime is Open Container Initiative (OCI) compliant?

Select the answer:Select the answer

1 correct answer

runC

runV

kata-containers

gvisor

Quiz

Question 2/102/10

Which API object is the recommended way to run a scalable, stateless application on your cluster?

Select the answer:Select the answer

1 correct answer

ReplicaSet

Deployment

DaemonSet

Pod

Quiz

Question 3/103/10

A CronJob is scheduled to run by a user every one hour. What happens in the cluster when it’s time
for this CronJob to run?

Select the answer:Select the answer

1 correct answer

Kubelet watches API Server for CronJob objects. When it’s time for a Job to run, it runs the Pod directly.

Kube-scheduler watches API Server for CronJob objects, and this is why it’s called kube-scheduler.

CronJob controller component creates a Pod and waits until it finishes to run.

CronJob controller component creates a Job. Then the Job controller creates a Pod and waits until it finishes to run.

Quiz

Question 4/104/10

What is the purpose of the kubelet component within a Kubernetes cluster?

Select the answer:Select the answer

1 correct answer

A dashboard for Kubernetes clusters that allows management and troubleshooting of applications.

A network proxy that runs on each node in your cluster, implementing part of the Kubernetes Service concept.

A component that watches for newly created Pods with no assigned node, and selects a node for them to run on.

An agent that runs on each node in the cluster. It makes sure that containers are running in a Pod.

Quiz

Question 5/105/10

What is the default value for authorization-mode in Kubernetes API server?

Select the answer:Select the answer

1 correct answer

--authorization-mode=RBAC

--authorization-mode=AlwaysAllow

--authorization-mode=AlwaysDeny

--authorization-mode=ABAC

Quiz

Question 6/106/10

Let’s assume that an organization needs to process large amounts of data in bursts, on a cloud-based
Kubernetes cluster. For instance: each Monday morning, they need to run a batch of 1000 compute
jobs of 1 hour each, and these jobs must be completed by Monday night. What’s going to be the
most cost-effective method?

Select the answer:Select the answer

1 correct answer

Run a group of nodes with the exact required size to complete the batch on time, and use a combination of taints, tolerations, and nodeSelectors to reserve these nodes to the batch jobs.

Leverage the Kubernetes Cluster Autoscaler to automatically start and stop nodes as they’re needed.

Commit to a specific level of spending to get discounted prices (with e.g. “reserved instances” or similar mechanisms).

Use PriorityClasses so that the weekly batch job gets priority over other workloads running on the cluster, and can be completed on time.

Quiz

Question 7/107/10

What is a Kubernetes service with no cluster IP address called?

Select the answer:Select the answer

1 correct answer

Headless Service

Nodeless Service

IPLess Service

Specless Service

Quiz

Question 8/108/10

CI/CD stands for:

Select the answer:Select the answer

1 correct answer

Continuous Information / Continuous Development

Continuous Integration / Continuous Development

Cloud Integration / Cloud Development

Continuous Integration / Continuous Deployment

CI/CD is a foundational practice for delivering software rapidly and reliably, and it maps strongly to
cloud native delivery workflows commonly used with Kubernetes. CI stands for Continuous
Integration: developers merge code changes frequently into a shared repository, and automated
systems build and test those changes to detect issues early. CD is commonly used to mean
Continuous Delivery or Continuous Deployment depending on how far automation goes. In many
certification contexts and simplified definitions like this question, CD is interpreted as Continuous
Deployment, meaning every change that passes the automated pipeline is automatically released to
production. That matches option D.
In a Kubernetes context, CI typically produces artifacts such as container images (built from
Dockerfiles or similar build definitions), runs unit/integration tests, scans dependencies, and pushes
images to a registry. CD then promotes those images into environments by updating Kubernetes
manifests (Deployments, Helm charts, Kustomize overlays, etc.). Progressive delivery patterns
(rolling updates, canary, blue/green) often use Kubernetes-native controllers and Service routing to
reduce risk.
Why the other options are incorrect: “Continuous Development” isn’t the standard “D” term; it’s
ambiguous and not the established acronym expansion. “Cloud Integration/Cloud Development” is
unrelated. Continuous Delivery (in the stricter sense) means changes are always in a deployable state
and releases may still require a manual approval step, while Continuous Deployment removes that
final manual gate. But because the option set explicitly includes “Continuous Deployment,” and that
is one of the accepted canonical expansions for CD, D is the correct selection here.
Practically, CI/CD complements Kubernetes’ declarative model: pipelines update desired state (Git or
manifests), and Kubernetes reconciles it. This combination enables frequent releases, repeatability,
reduced human error, and faster recovery through automated rollbacks and controlled rollout
strategies.
=========

Right Answer: D

Quiz

Question 9/109/10

What default level of protection is applied to the data in Secrets in the Kubernetes API?

Select the answer:Select the answer

1 correct answer

The values use AES symmetric encryption

The values are stored in plain text

The values are encoded with SHA256 hashes

The values are base64 encoded

Kubernetes Secrets are designed to store sensitive data such as tokens, passwords, or certificates and
make them available to Pods in controlled ways (as environment variables or mounted files).
However, the default protection applied to Secret values in the Kubernetes API is base64 encoding,
not encryption. That is why D is correct. Base64 is an encoding scheme that converts binary data into
ASCII text; it is reversible and does not provide confidentiality.
By default, Secret objects are stored in the cluster’s backing datastore (commonly etcd) as base64-
encoded strings inside the Secret manifest. Unless the cluster is configured for encryption at rest,
those values are effectively stored unencrypted in etcd and may be visible to anyone who can read
etcd directly or who has API permissions to read Secrets. This distinction is critical for security:
base64 can prevent accidental issues with special characters in YAML/JSON, but it does not protect
against attackers.
Option A is only correct if encryption at rest is explicitly configured on the API server using an
EncryptionConfiguration (for example, AES-CBC or AES-GCM providers). Many managed Kubernetes
offerings enable encryption at rest for etcd as an option or by default, but that is a deployment
choice, not the universal Kubernetes default. Option C is incorrect because hashing is used for
verification, not for secret retrieval; you typically need to recover the original value, so hashing isn’t
suitable for Secrets. Option B (“plain text”) is misleading: the stored representation is base64-
encoded, but because base64 is reversible, the security outcome is close to plain text unless
encryption at rest and strict RBAC are in place.
The correct operational stance is: treat Kubernetes Secrets as sensitive; lock down access with RBAC,
enable encryption at rest, avoid broad Secret read permissions, and consider external secret
managers when appropriate. But strictly for the question’s wording—default level of protection—
base64 encoding is the right answer.
=========

Right Answer: D

Quiz

Question 10/1010/10

What function does kube-proxy provide to a cluster?

Select the answer:Select the answer

1 correct answer

Implementing the Ingress resource type for application traffic.

Forwarding data to the correct endpoints for Services.

Managing data egress from the cluster nodes to the network.

Managing access to the Kubernetes API.

Looking for more questions?Buy now

KCNA: Kubernetes and Cloud Native Essentials Practice test unlocks all online simulator questions

Thank you for choosing the free version of the KCNA: Kubernetes and Cloud Native Essentials practice test! Further deepen your knowledge on Linux Foundation Simulator; by unlocking the full version of our KCNA: Kubernetes and Cloud Native Essentials Simulator you will be able to take tests with over 240 constantly updated questions and easily pass your exam. 98% of people pass the exam in the first attempt after preparing with our 240 questions.

BUY NOW

What to expect from our KCNA: Kubernetes and Cloud Native Essentials practice tests and how to prepare for any exam?

The KCNA: Kubernetes and Cloud Native Essentials Simulator Practice Tests are part of the Linux Foundation Database and are the best way to prepare for any KCNA: Kubernetes and Cloud Native Essentials exam. The KCNA: Kubernetes and Cloud Native Essentials practice tests consist of 240 questions and are written by experts to help you and prepare you to pass the exam on the first attempt. The KCNA: Kubernetes and Cloud Native Essentials database includes questions from previous and other exams, which means you will be able to practice simulating past and future questions. Preparation with KCNA: Kubernetes and Cloud Native Essentials Simulator will also give you an idea of the time it will take to complete each section of the KCNA: Kubernetes and Cloud Native Essentials practice test . It is important to note that the KCNA: Kubernetes and Cloud Native Essentials Simulator does not replace the classic KCNA: Kubernetes and Cloud Native Essentials study guides; however, the Simulator provides valuable insights into what to expect and how much work needs to be done to prepare for the KCNA: Kubernetes and Cloud Native Essentials exam.

BUY NOW

KCNA: Kubernetes and Cloud Native Essentials Practice test therefore represents an excellent tool to prepare for the actual exam together with our Linux Foundation practice test . Our KCNA: Kubernetes and Cloud Native Essentials Simulator will help you assess your level of preparation and understand your strengths and weaknesses. Below you can read all the quizzes you will find in our KCNA: Kubernetes and Cloud Native Essentials Simulator and how our unique KCNA: Kubernetes and Cloud Native Essentials Database made up of real questions:

Info quiz:

Quiz name:KCNA: Kubernetes and Cloud Native Essentials
Total number of questions:240
Number of questions for the test:50
Pass score:80%

You can prepare for the KCNA: Kubernetes and Cloud Native Essentials exams with our mobile app. It is very easy to use and even works offline in case of network failure, with all the functions you need to study and practice with our KCNA: Kubernetes and Cloud Native Essentials Simulator.

Use our Mobile App, available for both Android and iOS devices, with our KCNA: Kubernetes and Cloud Native Essentials Simulator . You can use it anywhere and always remember that our mobile app is free and available on all stores.

Our Mobile App contains all KCNA: Kubernetes and Cloud Native Essentials practice tests which consist of 240 questions and also provide study material to pass the final KCNA: Kubernetes and Cloud Native Essentials exam with guaranteed success. Our KCNA: Kubernetes and Cloud Native Essentials database contain hundreds of questions and Linux Foundation Tests related to KCNA: Kubernetes and Cloud Native Essentials Exam. This way you can practice anywhere you want, even offline without the internet.

BUY NOW

Quiz KCNA: Kubernetes and Cloud Native Essentials

Free Test - Simulator KCNA: Kubernetes and Cloud Native Essentials

KCNA: Kubernetes and Cloud Native Essentials Practice test unlocks all online simulator questions

What to expect from our KCNA: Kubernetes and Cloud Native Essentials practice tests and how to prepare for any exam?