cka exam questions Practice Exam: Test Your Knowledge 2025

You need to bootstrap a new Kubernetes cluster using kubeadm. After installing the necessary packages, which command should you run on the control plane node to initialize the cluster?

A cluster administrator needs to drain a node for maintenance while ensuring that DaemonSet pods remain running on the node. Which command accomplishes this?

You are backing up an etcd cluster in a production Kubernetes environment. Which command correctly creates a snapshot of the etcd database?

An organization needs to configure role-based access control (RBAC) to allow a service account to only view pods in the 'production' namespace. Which resource should be created?

You need to upgrade a Kubernetes cluster from one minor version to the next using kubeadm. What is the correct order of operations?

A deployment is not scheduling pods because of insufficient CPU resources. You need to identify which node has the most available CPU capacity. Which command would you use?

You need to ensure that a pod is scheduled only on nodes that have SSD storage. The nodes with SSD have been labeled with 'disktype=ssd'. What should you add to the pod specification?

A critical application must never be scheduled on the same node as a resource-intensive batch job. Both are labeled appropriately (app=critical and app=batch). Which scheduling mechanism should be configured on the critical application pod?

You need to expose a deployment named 'webapp' running on port 8080 as a ClusterIP service accessible within the cluster on port 80. Which command accomplishes this?

An application requires that pods can communicate with each other within the same namespace, but pods in other namespaces should not be able to reach them. How should this be implemented?

A company needs to expose an application to external users with SSL termination and path-based routing to different backend services. Which Kubernetes resource should be used?

You have deployed an Ingress resource but external traffic is not reaching your application. The Ingress controller is running. What is the most likely cause?

A stateful application requires persistent storage that survives pod restarts and rescheduling. Which combination of resources should be used?

You need to configure a StatefulSet to use dynamically provisioned storage with specific performance characteristics. Each pod should get its own persistent volume. What should be configured in the StatefulSet?

Pods in a deployment are crashing with 'CrashLoopBackOff' status. Which command provides the most useful information to diagnose the issue?

A pod is stuck in 'Pending' state. After running 'kubectl describe pod', you see 'FailedScheduling' events with the message '0/3 nodes are available: 3 Insufficient cpu'. What should you do first?

The kubelet on a worker node has stopped responding. Which systemd command should you use to check the kubelet service status and recent logs?

An application cannot resolve service names via DNS. You verify that CoreDNS pods are running. What should you check next?

After a cluster upgrade, the API server is not starting. You check '/var/log/pods/' and see errors about invalid certificate. Where should you look to verify the API server certificates?

Pods cannot reach external internet endpoints, but pod-to-pod communication works. The CNI plugin is installed and running. What is the most likely cause?