Kubernetes CKAD - Certified Kubernetes Application Developer - Application Design Workloads Config Observability

By Morgan Lee · Updated Jul 10, 2026

Questions24
Passing Score75%
Format100% Multiple Choice
Sessions Logged1,744
Your progressLog in / Register to track times taken, best score, questions mastered, and coverage on this quiz.
Rating
4.5 (16)

Topics covered

This quiz

Uncategorized24 (100%)

Uncategorized24 questions

Browse more · Report this quiz

Question catalog for this preview

Catalog listing of the 5 preview questions for this quiz.

Question 1

A developer needs to run a DaemonSet that deploys a log collection agent on every node, including control plane nodes. By default, the DaemonSet pods are NOT being scheduled on control plane nodes. What is the cause and solution?

Answer choices

  • A. DaemonSets don't support control plane nodes — use a StatefulSet instead

  • B. Control plane nodes have a taint `node-role.kubernetes.io/control-plane:NoSchedule` — add a toleration for this taint in the DaemonSet's pod spec

  • C. Increase the DaemonSet's `maxUnavailable` to include control plane nodes

  • D. Label the control plane nodes with `daemonset: enabled` and add a `nodeSelector` to the DaemonSet

Question 2

An application needs to gracefully handle shutdown signals. When a pod is deleted, Kubernetes sends `SIGTERM` to the container. The application needs 20 seconds to finish processing in-flight requests before terminating. How should this be configured?

Answer choices

  • A. Set `spec.terminationGracePeriodSeconds: 20` in the pod spec — Kubernetes will wait up to 20 seconds after SIGTERM before sending SIGKILL

  • B. Add a `lifecycle.preStop` hook that sleeps for 20 seconds — the application doesn't need any changes

  • C. Set `spec.activeDeadlineSeconds: 20` — this controls the shutdown window

  • D. Configure `readinessProbe.failureThreshold: 20` to delay pod removal

Question 3

A developer needs to run a data processing job that downloads a file, processes it, and exits. The job must retry up to 4 times if it fails. Which Kubernetes resource and configuration is correct?

Answer choices

  • A. Deployment with `restartPolicy: Always` and `replicas: 4`

  • B. Job with `backoffLimit: 4` and `restartPolicy: OnFailure`

  • C. CronJob with `successfulJobsHistoryLimit: 4`

  • D. StatefulSet with `podManagementPolicy: Parallel`

Question 4

A developer needs to ensure a specific container in a pod runs as a non-root user (UID 1000) and cannot escalate privileges. Which security configuration is correct?

```yaml

containers:

- name: app

image: myapp:v1

securityContext:

???

```

Answer choices

  • A. `runAsUser: 1000` and `allowPrivilegeEscalation: false`

  • B. `user: 1000` and `privileged: false`

  • C. `uid: 1000` and `noEscalation: true`

  • D. `runAsNonRoot: true` — this automatically sets UID to 1000

Question 5

You need to build a multi-container pod where an init container downloads configuration files before the main application container starts. The init container should run `wget -O /config/app.conf http://config-server/app.conf`. Which pod spec structure is correct?

Answer choices

  • A. List both containers under `spec.containers[]` and use `depends_on`

  • B. Define the wget container under `spec.initContainers[]` with a shared `emptyDir` volume mounted at `/config` in both containers

  • C. Use a sidecar container with `lifecycle.postStart` hook to run the wget command

  • D. Use a ConfigMap populated by a CronJob to pre-load the configuration