Kubernetes CKA - Certified Kubernetes Administrator - Cluster Architecture Workloads Networking Storage Security

By Morgan Lee · Updated May 25, 2026

Questions25
Passing Score75%
Format100% Multiple Choice
Sessions Logged1,527
Your progressLog in / Register to track times taken, best score, questions mastered, and coverage on this quiz.
Rating
4.6 (10)

Topics covered

This quiz

Uncategorized25 (100%)

Uncategorized25 questions

Browse more · Report this quiz

Question catalog for this preview

Catalog listing of the 5 preview questions for this quiz.

Question 1

A Kubernetes administrator is troubleshooting a node that shows `NotReady` status in `kubectl get nodes`. Which components should the administrator investigate first, and what commands are most useful?

Answer choices

  • A. Check the kube-apiserver logs since all node issues originate there

  • B. SSH to the affected node and investigate the `kubelet` service status (`systemctl status kubelet`), check kubelet logs (`journalctl -u kubelet`), and verify container runtime (containerd/Docker) is running

  • C. Restart the entire cluster to resolve node status issues

  • D. Delete and recreate the node object with `kubectl delete node` and re-join the cluster

Question 2

A CKA administrator needs to configure a CronJob that runs a batch job every day at 3 AM UTC, using the `batch-processor` container image. The job should run to completion and not be retried on failure. How is this configured?

Answer choices

  • A. Create a scheduled Deployment with a startup time annotation

  • B. Create a CronJob with `schedule: "0 3 * * *"`, `image: batch-processor`, and `spec.jobTemplate.spec.backoffLimit: 0`

  • C. Create a DaemonSet with a time-based trigger

  • D. Create a Kubernetes Timer object pointing to the Job manifest

Question 3

A CKA administrator needs to configure a static pod on a worker node. Static pods are managed directly by kubelet without the Kubernetes API server. What is the configuration mechanism?

Answer choices

  • A. Create the Pod manifest in the `/etc/kubernetes/manifests/` directory on the target node; kubelet automatically creates and manages the Pod

  • B. Use `kubectl create pod --static=true` with the node name

  • C. Configure the Pod in a DaemonSet with `nodeSelector` targeting the specific node

  • D. Use `kubectl apply --node=worker-1` to schedule a Pod on a specific node

Question 4

A Kubernetes administrator needs to debug a failing application. The Pod is running but the application inside is not responding. They need to execute a command inside the running container. Which kubectl command provides an interactive shell?

Answer choices

  • A. `kubectl attach <pod-name>` — attaches to the container's stdin/stdout

  • B. `kubectl exec -it <pod-name> -- /bin/bash` (or `/bin/sh` if bash is not available) — starts an interactive shell in the running container

  • C. `kubectl ssh <pod-name>` — provides SSH access to the container

  • D. `kubectl debug <pod-name>` — always provides a bash shell for debugging

Question 5

A Kubernetes administrator needs to configure a Pod to run as a non-root user (UID 1000) and prevent privilege escalation. Which Pod specification section controls these security settings?

Answer choices

  • A. The `metadata.annotations` section with security annotations

  • B. The `spec.securityContext` (Pod-level) and `spec.containers[].securityContext` (container-level) sections

  • C. The `spec.nodeSelector` section with security labels

  • D. The RBAC ClusterRole assigned to the Pod's ServiceAccount