Linux Foundation CKA Online Practice Questions and Exam Preparation

Linux Foundation CKA Online Questions & Answers

• Question 11:

  SIMULATION

  You must connect to the correct host.

  Failure to do so may result in a zero score.

  [candidate@base] $ ssh cka000060

  Task

  Install Argo CD in the cluster by performing the following tasks:

  Add the official Argo CD Helm repository with the name argo.

  The Argo CD CRDs have already been pre-installed in the cluster.

  Generate a template of the Argo CD Helm chart version 7.7.3 for the argocd namespace and save it to ~/argo-helm.yaml.

  Configure the chart to not install CRDs.

  Correct Answer. Check the answer in explanation.
  Check the answer in explanation.

  ---

  1. SSH into the host

  ssh cka000060

  2. Add the Argo CD Helm repository with the name argo

  helm repo add argo https://argoproj.github.io/argo-helm helm repo update

  3. Generate a template from the Argo CD Helm chart (version 7.7.3), disable CRDs, and save to a YAML file

  helm template argocd argo/argo-cd \ --namespace argocd \ --version 7.7.3 \ --set installCRDs=false \ > ~/argo-helm.yaml

  This command renders the manifest with CRD installation disabled, targeting the correct namespace and version.

  Optional: Verify YAML file is generated

  ls -l ~/argo-helm.yaml head ~/argo-helm.yaml

• Question 12:

  SIMULATION

  

  Context

  You have been asked to create a new ClusterRole for a deployment pipeline and bind it to a specific ServiceAccount scoped to a specific namespace.

  Task

  Create a new ClusterRole named deployment-clusterrole, which only allows to create the following resource types:

  1. Deployment

  2. StatefulSet

  3. DaemonSet

  Create a new ServiceAccount named cicd-token in the existing namespace app-team1.

  Bind the new ClusterRole deployment-clusterrole lo the new ServiceAccount cicd-token , limited to the namespace app-team1.

  Correct Answer. Check the answer in explanation.
  Check the answer in explanation.

  ---

  Solution: Task should be complete on node k8s -1 master, 2 worker for this connect use command [student@node-1] > ssh k8s kubectl create clusterrole deployment-clusterrole --verb=create -- resource=deployments,statefulsets,daemonsets kubectl create serviceaccount cicd-token --namespace=app-team1 kubectl create rolebinding deployment-clusterrole --clusterrole=deployment-clusterrole -- serviceaccount=default:cicd-token --namespace=app-team1

  

• Question 13:

  SIMULATION

  Create an nginx pod and list the pod with different levels of verbosity

  Correct Answer. Check the answer in explanation.
  Check the answer in explanation.

  ---

  // create a pod kubectl run nginx --image=nginx --restart=Never --port=80 // List the pod with different verbosity kubectl get po nginx --v=7 kubectl get po nginx --v=8 kubectl get po nginx --v=9

• Question 14:

  SIMULATION

  

  Create a snapshot of the etcd instance running at https://127.0.0.1:2379, saving the snapshot to the file path /srv/data/etcd-snapshot.db. The following TLS certificates/key are supplied for connecting to the server with etcdctl:

  1. CA certificate: /opt/KUCM00302/ca.crt

  2. Client certificate: /opt/KUCM00302/etcd-client.crt

  3. Client key: Topt/KUCM00302/etcd-client.key

  Correct Answer. Check the answer in explanation.
  Check the answer in explanation.

  ---

  Solution:

  

• Question 15:

  SIMULATION

  

  Set the node named ek8s-node-1 as unavailable and reschedule all the pods running on it.

  Correct Answer. Check the answer in explanation.
  Check the answer in explanation.

  ---

  Solution:

  

• Question 16:

  SIMULATION

  

  Task

  From the pod label name=cpu-utilizer, find pods running high CPU workloads and write the name of the pod consuming most CPU to the file /opt/KUTR00401/KUTR00401.txt (which already exists).

  Correct Answer. Check the answer in explanation.
  Check the answer in explanation.

  ---

  Solution:

  

• Question 17:

  SIMULATION

  Check the image version in pod without the describe command

  Correct Answer. Check the answer in explanation.
  Check the answer in explanation.

  ---

  kubectl get po nginx -o jsonpath='{.spec.containers[].image}{"\n"}'

• Question 18:

  SIMULATION

  Create and configure the service front-end-service so it's accessible through NodePort and routes to the existing pod named front-end.

  Correct Answer. Check the answer in explanation.
  Check the answer in explanation.

  ---

  Solution:

  

• Question 19:

  SIMULATION

  

  Task

  Schedule a pod as follows:

  1. Name: nginx-kusc00401

  2. Image: nginx

  3. Node selector: disk=ssd

  Correct Answer. Check the answer in explanation.
  Check the answer in explanation.

  ---

  Solution:

  

• Question 20:

  SIMULATION

  

  Check to see how many worker nodes are ready (not including nodes tainted NoSchedule) and write the number to /opt/KUCC00104/kucc00104.txt.

  Correct Answer. Check the answer in explanation.
  Check the answer in explanation.

  ---

  Solution: