Easy KCNA practice questions

During a security review, your team is documenting the '4Cs of Cloud Native Security' model to prioritize where controls should be applied. A colleague argues that if the outermost layer is poorly secured, weaknesses there can undermine all the layers built on top of it. Which layer of the 4Cs model is the outermost, foundational layer that the other three depend on?

A small team manually starts and stops containers across a fleet of five servers. As traffic grows, they struggle to keep applications running when a server crashes, to distribute load evenly, and to roll out new versions without downtime. They are evaluating whether to adopt a container orchestrator like Kubernetes. Which capability best explains why orchestration would solve their core problem?

A startup has built an open-source tool that automates cloud native cost analysis. The team wants to donate the project to the CNCF to increase its visibility, gain neutral governance, and grow a broader contributor community. They are unsure which entry point in the CNCF process is appropriate for a brand-new, early-stage project seeking initial acceptance into the foundation. Which CNCF maturity level should they target for their initial project submission?

A platform team at your company is evaluating a new open-source tool they found in the CNCF landscape. They notice it was recently accepted into the CNCF at the earliest maturity level, has a small number of contributors, and is intended primarily for early adopters and experimentation rather than production-critical workloads. Which CNCF project maturity level best matches this description?

A small team currently runs containers directly on individual VMs using shell scripts. When a container crashes at night, it stays down until someone manually restarts it, causing outages. They are evaluating whether adopting a container orchestrator like Kubernetes would help. Which core orchestration capability most directly addresses their problem of crashed containers staying down?

A developer runs `kubectl get pods` and sees only 3 Pods, but a colleague insists the cluster is running dozens of Pods across several teams' applications. What is the most likely reason the developer sees only 3 Pods?

Your team is designing a disaster recovery plan for a self-managed Kubernetes cluster. During a review, a colleague asks which control plane component stores all cluster state and configuration data (such as the desired number of replicas, Secrets, and object definitions) that must be backed up to fully restore the cluster. Which component should you identify?

A platform engineer is packaging a web application with Helm. They want to store the raw Kubernetes manifest definitions with placeholders that get substituted from configurable inputs at install time. Inside a Helm chart directory, which location is designed to hold these parameterized manifest files?

Your team has finished developing a Helm chart for an internal payments service. You now need to bundle the chart into a versioned, distributable archive so it can be uploaded to a shared Helm chart repository for other teams to install. Which Helm command produces this archive?

A data team needs to run a one-time database migration script inside the cluster. The script should run in a container, execute until it finishes successfully, and then stop without being restarted or kept running. Which Kubernetes resource is designed for this workload?

A platform engineer wants to inspect the complete live state of a running Deployment named 'payments' in the 'prod' namespace, including fields the scheduler and controllers populated automatically (such as status and default values). Which kubectl command produces this full server-side representation in YAML?

A platform engineer wants to feed the complete state of all Pods in the 'payments' namespace into a custom script that parses structured data. They run 'kubectl get pods -n payments' but the default table output is hard to parse programmatically. Which flag should they add to produce machine-readable structured output containing the full resource definitions?

A developer deploys an application and runs 'kubectl get pods' but sees the message 'No resources found in default namespace.' They are certain the Deployment was created successfully in a namespace called 'team-web'. Which command will correctly list the Pods that were created?

You are troubleshooting why a Service is not selecting the Pods you expect. Before editing anything, you want to quickly display all Pods in the current namespace along with the labels attached to each Pod so you can compare them against the Service's selector. Which kubectl command produces this output?

A developer reports that one of their application Pods seems unhealthy, and they want to quickly determine which worker node the Pod is running on and its assigned Pod IP without opening the full resource definition. Which kubectl command gives them this information most directly?

You are on call and a Deployment named 'web-frontend' is running 3 Pods, but traffic has spiked and you need it running 6 Pods immediately without editing and reapplying any YAML files. Which command achieves this the fastest?

A developer wants to run a single stateless container that serves an internal caching layer for testing. They ask which Kubernetes resource is the smallest deployable unit that actually runs the container, forming the basic building block that higher-level controllers manage. Which resource are they referring to?