CKA PDF Dumps 2025 Exam Questions with Practice Test [Q13-Q36]

QUESTION 13
You have a Deployment named ‘worker-deployment’ with 10 replicas of a worker container. You need to implement a rolling update strategy that allows for a maximum of 3 pods to be unavailable at any given time during the update process. You also want to ensure that the update process is completed within a specified timeout of 10 minutes. If the update fails to complete within the timeout, the deployment should revert to the previous version. Additionally, you want to implement a pause functionality to temporarily halt the rolling update process.

QUESTION 14
Create an nginx pod and set an env value as ‘var1=val1’. Check the env value existence within the pod

kubectl run nginx –image=nginx –restart=Never –env=var1=val1
# then
kubectl exec -it nginx — env
# or
kubectl exec -it nginx — sh -c ‘echo $var1’
# or
kubectl describe po nginx | grep val1
# or
kubectl run nginx –restart=Never –image=nginx –env=var1=val1
-it –rm – env

kubectl run nginx –image=nginx –restart=Never –env=var1=val1
# then
kubectl exec -it nginx — env
# or
kubectl run nginx –restart=Never –image=nginx –env=var1=val1
-it –rm — env

QUESTION 15
You have two Kubernetes deployments running in different namespaces, ‘namespace-A’ and ‘namespace-B’. You need to allow communication from pods in ‘namespace-A’ to a specific pod in namespace-B’. How can you achieve this using NetworkPolicies?

QUESTION 16
You have a deployment that runs multiple replicas of a web server application. You need to ensure that the Deployment always maintains at least 2 replicas available, even if one or more pods are deleted or become unavailable. How can you configure the Deployment to achieve this using the ‘maxUnavailable’ field in the ‘strategy.rollingUpdate’ section?

QUESTION 17
Monitor the logs of pod foo and:
* Extract log lines corresponding unable-to-access-website
* Write them to/opt/KULM00201/foo

QUESTION 18
For this item, you will have to ssh and complete all tasks on these
nodes. Ensure that you return to the base node (hostname: ) when you have completed this item.
Context
As an administrator of a small development team, you have been asked to set up a Kubernetes cluster to test the viability of a new application.
Task
You must use kubeadm to perform this task. Any kubeadm invocations will require the use of the
–ignore-preflight-errors=all option.
Configure the node ik8s-master-O as a master node. .
Join the node ik8s-node-o to the cluster.

QUESTION 19
You have a Deployment that runs a containerized application. The application requires access to a specific service running in a different namespace. You need to define a NetworkPolicy to allow traffic from the application’s Pods to the service in the other namespace only on port 8080.

QUESTION 20
Change the Image version to 1.15-alpine for the pod you just created and verify the image version is updated.

Kubect1 set image pod/nginx nginx=nginx:1.15-alpine
kubect1 describe po nginx
// another way it will open vi editor and change the version
kubeclt edit po nginx
kubect1 describe po nginx

Kubect1 set image pod/nginx nginx=nginx:1.15-alpine
kubect1 describe po nginx
// another way it will open vi editor and change the version
kubect1 describe po nginx

QUESTION 21
Score:7%

Context
An existing Pod needs to be integrated into the Kubernetes built-in logging architecture (e. g. kubectl logs). Adding a streaming sidecar container is a good and common way to accomplish this requirement.
Task
Add a sidecar container named sidecar, using the busybox Image, to the existing Pod big-corp-app. The new sidecar container has to run the following command:
/bin/sh -c tail -n+1 -f /va r/log/big-corp-app.log
Use a Volume, mounted at /var/log, to make the log file big-corp-app.log available to the sidecar container.

QUESTION 22
You have a Deployment running a complex application that requires significant resource allocation. How can you optimize the Deployment to use resources efficiently and avoid resource contention with other deployments?

See the solution below with Step by Step Explanation.
Explanation:
Solution (Step by Step) :
1. Define Resource Requests and Limits:
– Set ‘requests’ and ‘limits’ for CPU and memory for the containers in the Deployment.
– This helps in specifying the minimum resources required by the pods and the maximum resources that they can consume.

2. Optimize Container Images: – Use smaller and more efficient container images to reduce the resource footprint of the pods. 3. Use Resource Quotas: – Apply resource quotas at the namespace level to control the resource consumption of the pods within a namespace. 4. Consider Pod Disruption Budgets (PDB): – Implement PDBs to control the maximum number of pods that can be unavailable during a rolling update or pod deletion. – This ensures that the application remains available during resource-intensive events. 5. Utilize Node Affinity and Tolerations: – Configure node affinity and tolerations to schedule pods on specific nodes that have the required resources. 6. Monitor Resource Utilization: – Regularly monitor the resource utilization of the cluster and the pods. – Use tools like ‘kubectl top pods’, ‘kubectl top nodes’, and ‘kubectl describe nodes’ to gather resource – Adjust resource requests and limits accordingly based on the monitoring data. 7. Consider Vertical Pod Autoscaler (VPA): – Utilize VPA to automatically adjust the resource requests and limits of pods based on their actual resource consumption. 8. Optimize Application Code: – Identify and optimize resource-intensive parts of the application code to reduce resource consumption. – Use profiling tools to identify areas for improvement. 9. Implement Resource Optimization Techniques: – Utilize techniques such as caching, lazy loading, and efficient data structures to reduce resource usage within the application. 10. Explore Resource Sharing Techniques: – If possible, explore resource sharing techniques such as using shared volumes or databases to reduce overall resource consumption.,

QUESTION 23
You have a deployment named ‘my-app’ running a web application that uses an external database service. You need to configure a ‘ClusterlP’ service to route traffic to the external database service.

QUESTION 24
List all the pods sorted by created timestamp

QUESTION 25
You have a Kubernetes cluster with a service account named “my-sa” in the “my-namespace” namespace. You need to grant the service account the ability to read and write secrets in the “my-namespace” namespace and the ability to create pods in that namespace.
Create a Role and RoleBinding to achieve this using kubectl commands.

QUESTION 26
Score: 4%

Task
Check to see how many nodes are ready (not including nodes tainted NoSchedule ) and write the number to
/opt/KUSC00402/kusc00402.txt

QUESTION 27
Set the node namedek8s-node-1asunavailable and reschedule all thepods running on it.

QUESTION 28
Create a deployment called webapp with image nginx having 5 replicas in it, put the file in /tmp directory with named webapp.yaml

//Create a file using dry run command
kubectl create deploy –image=nginx –dry-run -o yaml >
/tmp/webapp.yaml
// Now, edit file webapp.yaml and update replicas=5
apiVersion: apps/v1
kind: Deployment
metadata:
labels:
app: webapp
name: webapp
spec:
replicas: 5
selector:
matchLabels:
app: webapp
template:
metadata:
labels:
app: webapp
spec:
containers:
– image: nginx
name: nginx
Note: Search “deployment” in kubernetes.io site , you will get
the page
https://kubernetes.io/docs/concepts/workloads/controllers/deplo
yment/
// Verify the Deployment
kubectl get deploy webapp –show-labels
// Output the YAML file of the deployment webapp
kubectl get deploy webapp -o yaml

//Create a file using dry run command
kubectl create deploy –image=nginx –dry-run -o yaml >
/tmp/webapp.yaml
// Now, edit file webapp.yaml and update replicas=5
apiVersion: apps/v1
kind: Deployment
metadata:
labels:
app: webapp
name: webapp
spec:
replicas: 5
selector:
matchLabels:
app: webapp
template:
metadata:
labels:
Note: Search “deployment” in kubernetes.io site , you will get
the page
https://kubernetes.io/docs/concepts/workloads/controllers/deplo
yment/
// Verify the Deployment
kubectl get deploy webapp –show-labels
// Output the YAML file of the deployment webapp
kubectl get deploy webapp -o yaml

QUESTION 29
Get the pods with label env=dev and output the labels

QUESTION 30
Your Kubernetes cluster is experiencing a high number of pod restarts in the ‘database-service’ Deployment. The logs show errors related to “connection refused” from the database service. You need to diagnose the issue and resolve it.

QUESTION 31
Create a deployment as follows:
Name: nginx-app
Using container nginx with version 1.11.10-alpine
The deployment should contain 3 replicas
Next, deploy the application with new version 1.11.13-alpine, by performing a rolling update.
Finally, rollback that update to the previous version 1.11.10-alpine.

QUESTION 32
To protect your firewall and network from single source denial of service (DoS) attacks that can overwhelm its packet buffer and cause legitimate traffic to drop, you can configure:

BGP (Border Gateway Protocol)

PGP (Packet Gateway Protocol)

PBP (Packet Buffer Protection)

PBP (Protocol Based Protection)

QUESTION 33
Create a pod as follows:
* Name:non-persistent-redis
* container Image:redis
* Volume with name:cache-control
* Mount path:/data/redis
The pod should launch in thestagingnamespace and the volumemust notbe persistent.

QUESTION 34
Create a busybox pod that runs the command “env” and save the output to “envpod” file

QUESTION 35
You have a Deployment named ‘mysql-deployment’ running a MySQL database server. You need to store the MySQL root password securely using a Secret. This password should be used by the database server when it starts.

QUESTION 36
Create a busybox pod and add “sleep 3600” command

CKA PDF Dumps 2025 Exam Questions with Practice Test [Q13-Q36]

admin

Leave a Reply Cancel reply