A.  

ClusterIP

B.  

NodePort

C.  

LoadBalancer

D.  

ExternalName

A.  

It is the API endpoint of our Kubernetes cluster.

B.  

It is a name of special Pod in kube-system namespace.

C.  

It is an IP address that we can access from the Internet.

D.  

It is an object that gets IP addresses of individual Pods assigned to it.

A.  

Use an init container with shared file storage.

B.  

Use a PVC volume.

C.  

Use a sidecar container with shared volume.

D.  

Use another Pod with a PVC.

A.  

Use helm upgrade with the --set flag to apply new values while preserving the release history.

B.  

Use kubectl edit to modify the live release configuration and apply the updated resource values.

C.  

Delete the release and reinstall it with the desired configuration to force an updated deployment.

D.  

Edit the Helm chart source files directly and reapply them to push the updated configuration values.

A.  

Continuous Information / Continuous Development

B.  

Continuous Integration / Continuous Development

C.  

Cloud Integration / Cloud Development

D.  

Continuous Integration / Continuous Deployment

A.  

By specifying .spec.clusterIP: headless

B.  

By specifying .spec.clusterIP: None

C.  

By specifying .spec.clusterIP: 0.0.0.0

D.  

By specifying .spec.clusterIP: localhost

A.  

Use multi-stage builds, use the latest tag for image version, and only install necessary packages.

B.  

Use multi-stage builds, pin the base image version to a specific digest, and install extra packages just in case.

C.  

Use multi-stage builds, pin the base image version to a specific digest, and only install necessary packages.

D.  

Avoid multi-stage builds, use the latest tag for image version, and install extra packages just in case.

A.  

etcd

B.  

kube-controller-manager

C.  

kube-proxy

D.  

kube-scheduler

A.  

The kubelet.

B.  

The kube-proxy.

C.  

The kube-apiserver.

D.  

The container runtime.

A.  

A web application that requires multiple replicas for load balancing.

B.  

A service that routes traffic to various microservices in the cluster.

C.  

A background job that runs periodically and does not maintain state.

D.  

A database that requires persistent storage and stable network identities.

A.  

Adding a CustomResourceDefinition or implementing an aggregation layer.

B.  

Adding a new version of a resource, for instance v4beta3.

C.  

With the command kubectl extend api, logged in as an administrator.

D.  

Adding the desired API object as a kubelet parameter.

A.  

The kube-proxy

B.  

The node controller

C.  

The kubectl

D.  

The kube-apiserver

A.  

Custom Resources

B.  

Labels

C.  

Label Selector

D.  

Pod

A.  

It’s a type of workload that ensures a specific set of nodes run a copy of a Pod.

B.  

It’s a type of workload responsible for maintaining a stable set of replica Pods running in any node.

C.  

It’s a type of workload that needs to be run periodically on a given schedule.

D.  

It’s a type of workload that provides guarantees about ordering, uniqueness, and identity of a set of Pods.

A.  

Metrics

B.  

Logs

C.  

Spans

D.  

Traces

A.  

rune, cgroups

B.  

docker, containerd

C.  

runsc, kata

D.  

crun, cri-o

A.  

It is a specification for describing event data in common formats for Kubernetes network traffic management and cloud providers.

B.  

It is a specification for describing event data in common formats in all cloud providers including major cloud providers.

C.  

It is a specification for describing event data in common formats to provide interoperability across services, platforms and systems.

D.  

It is a Kubernetes specification for describing events data in common formats for iCloud services, iOS platforms and iMac.

A.  

Rook

B.  

Kubernetes

C.  

Helm

D.  

Container Storage Interface (CSI)

A.  

LoadBalancer

B.  

Services without selectors

C.  

NodePort

D.  

ClusterIP with selectors

A.  

Pod

B.  

ContainerSet

C.  

ReplicaSet

D.  

Deployment

A.  

Resiliency, Operability, Observability, Availability

B.  

Resiliency, Containerd, Observability, Agility

C.  

Kubernetes, Operability, Observability, Availability

D.  

Resiliency, Agility, Operability, Observability

A.  

custom.k8s.io

B.  

resources.k8s.io

C.  

metrics.k8s.io

D.  

cadvisor.k8s.io

A.  

Stale or expired CertificateSigningRequests (CSRs) and old deployments.

B.  

Nodes deleted by a cloud controller manager and obsolete logs from the kubelet.

C.  

Unused container and container images, and obsolete logs from the kubelet.

D.  

Terminated pods, completed jobs, and objects without owner references.

A.  

A monitoring mechanism of the Kubernetes API.

B.  

A pre-operational scope issued by the kubectl agent.

C.  

A diagnostic performed periodically by the kubelet on a container.

D.  

A logging mechanism of the Kubernetes API.

A.  

Namespaces

B.  

Containers

C.  

Hypervisors

D.  

cgroups

A.  

With kubectl edit deployment exclusively.

B.  

With kubectl scale-up deployment exclusively.

C.  

With kubectl scale deployment and kubectl edit deployment.

D.  

With kubectl scale deployment exclusively.

A.  

To automatically scale the number of Pod replicas based on resource utilization.

B.  

To track performance metrics and report health status for nodes and Pods.

C.  

To coordinate rolling updates of Pods when deploying new application versions.

D.  

To allocate and manage persistent volumes required by stateful applications.

A.  

kubectl

B.  

AWS Management Console

C.  

Kubernetes API

D.  

Google Cloud SDK

A.  

Schedule, scale, and manage the health of containers.

B.  

Create images, scale, and manage the health of containers.

C.  

Debug applications, and manage the health of containers.

D.  

Store images, scale, and manage the health of containers.

A.  

NetworkPolicy

B.  

Linkerd

C.  

kube-proxy

D.  

Nginx

A.  

Node Autoscaler

B.  

Cluster Autoscaler

C.  

Horizontal Pod Autoscaler

D.  

Vertical Pod Autoscaler

A.  

A DaemonSet ensures that all (or certain) nodes run a copy of a Pod.

B.  

A DaemonSet ensures that the kubelet is constantly up and running.

C.  

A DaemonSet ensures that there are as many pods running as specified in the replicas field.

D.  

A DaemonSet ensures that a process (agent) runs on every node.

A.  

kubectl exec --

B.  

docker exec

C.  

kubectl run --

D.  

kubectl attach -i

A.  

A new Pod with the same UID is scheduled to another node after a while.

B.  

A new, near-identical Pod but with different UID is scheduled to another node.

C.  

By default, a Pod can only be scheduled to the same node when the node fails.

D.  

A new Pod is scheduled on a different node only if it is configured explicitly.

A.  

The act of adding/removing node instances to the cluster to meet demand.

B.  

The act of adding/removing applications to meet demand.

C.  

The act of adding/removing application instances of the same application to meet demand.

D.  

The act of adding/removing resources to application instances to meet demand.

A.  

kubectl get pods

B.  

kubectl ls

C.  

kubectl ps

D.  

kubectl show pods

A.  

Docker Swarm

B.  

Kubernetes

C.  

Mesos

D.  

Serverless

A.  

If you let iptables see bridged traffic, you don't need a container runtime.

B.  

If you enable IPv4 forwarding, you don't need a container runtime.

C.  

Container runtimes are deprecated, you must install CRI on each node.

D.  

You must install a container runtime on each node to run pods on it.

A.  

An open source dashboard for Kubernetes.

B.  

A package manager for Kubernetes applications.

C.  

A custom scheduler for Kubernetes.

D.  

An end-to-end testing project for Kubernetes applications.

A.  

--authorization-mode=RBAC

B.  

--authorization-mode=AlwaysAllow

C.  

--authorization-mode=AlwaysDeny

D.  

--authorization-mode=ABAC

A.  

Ingress provides a simple way to track network endpoints within a cluster.

B.  

Ingress is a Service type like NodePort and ClusterIP.

C.  

Ingress is a construct that allows you to specify how a Pod is allowed to communicate.

D.  

Ingress exposes routes from outside the cluster to Services in the cluster.

A.  

Four hosts. Two for control plane nodes and two for etcd nodes.

B.  

Four hosts. One for a control plane node and three for etcd nodes.

C.  

Three hosts. The control plane nodes and etcd nodes share the same host.

D.  

Six hosts. Three for control plane nodes and three for etcd nodes.

A.  

When the Pod crashes because of an error.

B.  

When a new node is added to the Kubernetes cluster.

C.  

When the CPU load on the node becomes too high.

D.  

When a new Pod is created and has no assigned node.

A.  

It's a mechanism for applications and microservices to locate each other on a network.

B.  

It's a procedure for discovering a MAC address, associated with a given IP address.

C.  

It's used for automatically assigning IP addresses to devices connected to the network.

D.  

It's a protocol that turns human-readable domain names into IP addresses on the Internet.

A.  

Grafana

B.  

Graphite

C.  

Nirvana

D.  

GraphQL

A.  

2

B.  

3

C.  

4

D.  

5

A.  

Headless Service

B.  

Nodeless Service

C.  

IPLess Service

D.  

Specless Service

A.  

Service Mesh Specification (SMS)

B.  

Service Mesh Technology (SMT)

C.  

Service Mesh Interface (SMI)

D.  

Service Mesh Function (SMF)

A.  

A Helm chart is a collection of YAML files bundled in a tar.gz file and can be applied without decompressing it.

B.  

A Helm chart is a collection of JSON files and contains all the resource definitions to run an application on Kubernetes.

C.  

A Helm chart is a collection of YAML files that can be applied on Kubernetes by using the kubectl tool.

D.  

A Helm chart is similar to a package and contains all the resource definitions to run an application on Kubernetes.

A.  

/var/log/pods/

B.  

~/.kube/config

C.  

/var/log/k8s/

D.  

/etc/kubernetes/

A.  

kubectl get deployments --show-labels -o wide

B.  

kubectl describe deployment my-deployment --namespace=default

C.  

kubectl logs deployment/my-deployment --all-containers=true

D.  

kubectl rollout status deployment/my-deployment

A.  

A Pod that runs next to another container within the same Pod.

B.  

A container that runs next to another Pod within the same namespace.

C.  

A container that runs next to another container within the same Pod.

D.  

A Pod that runs next to another Pod within the same namespace.

A.  

StatefulSet

B.  

Deployment

C.  

Pod

D.  

Container

A.  

Kubernetes

B.  

apt-get

C.  

Docker Images

D.  

CI/CD Pipeline

A.  

Jenkins X

B.  

Flagger

C.  

Flux

D.  

Argo Workflows

A.  

It should be minimal and purpose-built for the application to reduce attack surface and improve performance.

B.  

It should always be the latest version to ensure access to the newest features.

C.  

It should be the largest available image to ensure all dependencies are included.

D.  

It can be any existing image from the public repository without consideration of its contents.

A.  

StorageVolume

B.  

PersistentVolume

C.  

StorageClass

D.  

PersistentVolumeClaim

A.  

Kubernetes supports up to 1000 nodes and recommends no more than 1000 containers per node.

B.  

Kubernetes supports up to 5000 nodes and recommends no more than 500 Pods per node.

C.  

Kubernetes supports up to 5000 nodes and recommends no more than 110 Pods per node.

D.  

Kubernetes supports up to 50 nodes and recommends no more than 1000 containers per node.

A.  

On login

B.  

On update

C.  

On start

D.  

On failure

A.  

kubeadm

B.  

kubelet

C.  

kube-apiserver

D.  

kubectl

A.  

Authentication and authorization

B.  

Distributing and replicating data

C.  

Security vulnerability scanning

D.  

Configuration management

A.  

Pod eviction or starting

B.  

Resource monitoring and reporting

C.  

Filtering and scoring nodes

D.  

Starting and terminating containers

A.  

DaemonSet

B.  

StatefulSet

C.  

kubectl

D.  

Deployment

A.  

Custom Resource Definition

B.  

Custom Restricted Definition

C.  

Customized RUST Definition

D.  

Custom RUST Definition

A.  

CRI-O

B.  

LXD

C.  

containerd

D.  

kata-runtime

A.  

The ability to cryptic and obscure all traffic.

B.  

The ability to classify the Pods as isolated and non isolated.

C.  

The ability to prevent loopback or incoming host traffic.

D.  

The ability to log network security events.

A.  

Special Interest Group

B.  

Software Installation Guide

C.  

Support and Information Group

D.  

Strategy Implementation Group

A.  

Kubelet watches API Server for CronJob objects. When it’s time for a Job to run, it runs the Pod directly.

B.  

Kube-scheduler watches API Server for CronJob objects, and this is why it’s called kube-scheduler.

C.  

CronJob controller component creates a Pod and waits until it finishes to run.

D.  

CronJob controller component creates a Job. Then the Job controller creates a Pod and waits until it finishes to run.

A.  

Rolling update

B.  

Blue/Green deployment

C.  

Canary deployment

D.  

Recreate deployment

A.  

A portable operating system.

B.  

File system redundancy.

C.  

A container image registry.

D.  

Automated rollouts and rollbacks.

A.  

Replication controllers

B.  

Consensus protocols

C.  

Rolling updates

D.  

StatefulSet