[2025] New KCNA exam Free Sample Questions to Practice [Q115-Q136]

December 4, 2025 admin 0 Comments

Rate this post

[2025] New KCNA exam Free Sample Questions to Practice

Cover Real KCNA Exam Questions Make Sure You 100% Pass

The KCNA certification exam is an online, proctored exam that can be taken from anywhere in the world. It is a timed exam that lasts for 2 hours, and individuals must score at least 66% to pass. KCNA exam consists of 50 multiple-choice questions that are designed to test an individual’s understanding of Kubernetes and cloud-native technologies.

Linux Foundation recommends that individuals who are interested in taking the KCNA certification exam have some prior knowledge of Linux and basic cloud computing concepts. However, it is not a requirement, and anyone can take the exam regardless of their background. KCNA exam is designed to be accessible to everyone, and the Linux Foundation provides resources and training materials to help individuals prepare for the exam.

NEW QUESTION 115
Continuous delivery is ______.

Manually deploying the code

Coding, Building and Testing the code

Automatically deploying code to [container or server] environment

NEW QUESTION 116
The Kubernetes rolling update is used for __.

Updating a service

Scaling an application

Updating a deployment

https://kubernetes.io/docs/tutorials/kubernetes-basics/update/update-intro/

NEW QUESTION 117
You need to configure a HorizontalPodAutoscaler (HPA) to scale a deployment based on custom metrics. The metric data is being published by a Prometheus server. How can you integrate Prometheus with the HPA for custom metric scaling?

Use the ‘-metrics-sources flag for the HPA command to specify the Prometheus endpoint.

Create a Kubernetes Custom Resource Definition (CRD) to define the Prometheus metric.

Use the ‘-metrics’ flag in the Deployment YAML file to link the HPA to Prometheus metrics.

Configure a Kubernetes Service to expose the Prometheus metrics to the HPA.

Use a custom Kubernetes controller that connects the HPA to Prometheus.

You need a custom controller to bridge the gap between the HPA and Prometheus. The controller will fetch metrics from Prometheus and provide them to the HPA. You can use the ‘-metrics’ flag in the HPA YAML file to specify the custom metrics and their sources (including the Prometheus endpoint).

NEW QUESTION 118
You are using Prometheus to monitor a Kubernetes cluster. You want to set up an alert that triggers when the average CPU usage of all nodes in the cluster exceeds 80% for the last 10 minutes. Which Prometheus query can achieve this?

The query > 0.8′ calculates the average system CPU usage across all nodes over the last 10 minutes. The filter ensures that only system CPU usage is considered. If the average exceeds 0.8 (80%), the alert will trigger.

NEW QUESTION 119
Which part of a Kubernetes cluster is responsible for running container workloads?

Worker Node

kube-proxy

Control plane

etcd

Worker Nodes are responsible for executing containerized workloads.

NEW QUESTION 120
Your organization is adopting a cloud-native approach and plans to migrate several legacy applications to Kubernetes. Which role would be primarily responsible for designing and implementing the overall Kubernetes infrastructure, including resource allocation, networking, and security policies?

DevOps Engineer

Site Reliability Engineer (SRE)

Cloud Architect

Security Engineer

Data Scientist

A Cloud Architect is responsible for the overall design, implementation, and management of cloud-based infrastructure, including Kubernetes- They ensure the infrastructure meets the organization’s needs for scalability, security, and performance.

NEW QUESTION 121
You are tasked with deploying a microservices application on Kubernetes. The application relies heavily on communication between its different services, and you need to ensure reliable and secure communication. Which of the following open standards are most relevant for this scenario?

Open Service Mesh (OSM)

Cloud Native Computing Foundation (CNCF)

Service Level Objectives (SLOs)

Kubernetes API

Open Container Initiative (OCI)

Open Service Mesh (OSM) is an open standard focused on providing a secure and reliable way to connect microservices. It helps with service discovery, load balancing, traffic management, and security features, making it ideal for deploying microservices applications on Kubernetes.

NEW QUESTION 122
Consider the following Kubernetes YAML definition:
apiVersion: vl
kind: Pod
metadata:
name: nginx-pod
spec:
containers :
– name: nginx
image: nginx: latest
ports :
– containerPort: 80
If you were to deploy this Pod definition, what port would the Nginx server be listening on inside the container?

8080

443

0 22

The port is not specified in the YAML.

The •containerPort• field in the YAML defines the port that the container’s Nginx server will listen on. In this case, it’s explicitly set to ’80’

NEW QUESTION 123
Which project is not a dominant CNCF project in the storage landscape?

Envoy

Vitess

Rook

TiKV

https://github.com/cncf/landscape#trail-map

NEW QUESTION 124
You have a Kubernetes cluster running on AWS. You want to configure a persistent volume claim (PVC) that uses an AWS EBS volume for storage. Which annotation can be used to specify the EBS volume type?

volume.beta.kubernetes.io/storage-class

volume.beta.kubernetes.io/storage-provisioner

volume.beta.kubernetes.io/aws-ebs-volume-type

volume.beta.kubernetes.io/aws-ebs-volume-size

volume.beta.kubernetes.io/aws-ebs-volume-encrypted

The annotation •volume.beta.kubernetes.io/aws-ebs-volume-type• is used to specify the EBS volume type (e.g., ‘gp2 , 701’, ‘standard’) when using an AWS EBS volume for persistent storage. Option ‘A’ is used to specify the storage class for the PVC. Option ‘B’ specifies the storage provisioner, which is responsible for creating the volume. Option ‘D’ is used to specify the size of the EBS volume. Option ‘E’ is for specifying whether the EBS volume should be encrypted.

NEW QUESTION 125
You are troubleshooting a performance issue with an application running in a Kubernetes cluster. You have access to Prometheus and Jaeger, but the Jaeger Ul shows that a specific request took an unusually long time to process. Which metric in Prometheus can help you identify the specific component or service within the application that caused the delay?

kube_pod_container_resource_requests_cpu_cores

kube_pod_status_phase

kube_deployment_status_replicas

kube_pod_container_status_restart_count

http_request_duration_seconds

The correct answer is E . The metric ‘http_request_duration_seconds* is typically used to track the time taken for HTTP requests to be processed. In this case, by looking at the ‘http_request_duration_seconds’ metric for the specific request identified in Jaeger, you can see the duration of each stage of the request processing. This can pinpoint the specific component or service where the delay occurred. The other options are not relevant to identifying the specific component or service causing the delay: A : Shows CPU resource requests for a pod. B : Shows the pod’s phase. C : Shows the number of replicas in a deployment. D : Shows the restart count for a pod’s containers. These metrics do not provide information about the processing time of individual requests.

NEW QUESTION 126
You are developing a microservices application with multiple pods communicating over a shared network. You need to implement a mechanism that ensures only authorized pods can access specific services within the network. What Kubernetes feature can help achieve this?

PodSecurityPolicy

NetworkPolicy

ServiceAccount

ResourceQuota

LimitRange

NetworkPolicy is designed for network traffic control within a Kubernetes cluster It allows you to define rules that control inbound and outbound traffic for pods based on their labels, namespaces, and other criteria. This enables you to enforce access restrictions between pods and services within your application’s network. PodSecurityPolicy primarily restricts security settings for pods. ServiceAccount provides identity and credentials, and ResourceQuota and LimitRange manage resource usage.

NEW QUESTION 127
You are running a Kubernetes cluster with multiple nodes. Your application’s Pods need to be scheduled across different nodes for high availability. Which Kubernetes concept allows you to control the distribution of Pods across the cluster?

Pod Security Policy

Node Affinity

Service

Deployment

Ingress

Node Affinity lets you define rules to control where your Pods are scheduled. You can specify hard (required) or soft (preferred) preferences for nodes based on labels or other criteria. This helps to distribute Pods across the cluster for better resource utilization and fault tolerance.

NEW QUESTION 128
Which of the following computing model doesn’t require you to provision infrastructure?

None of the above

Bare Metal

Compute Engine

Virtual Machines

Serverless

NEW QUESTION 129
What is the command used to login to the pod?

kubectl login

kubectl list

kubectl exec

kubectl get

https://kubernetes.io/docs/reference/generated/kubectl/kubectl-commands#exec

NEW QUESTION 130
Which organizational persona creates Service Level Agreements ‘SLA’, Service Level Objectives ‘SLO’, and Service Level Indicator ‘SLI’?

Developer

DevSecOps

Site Reliability Engineer (SRE)

Security and Compliance Engineer

DevOps

SREs create SLAs, SLOs, and SLIs to define and implement standards for application and infra-structure reliability.

NEW QUESTION 131
Which kubernetes object do deployments use behind the scenes when they need to scale pods?

POD

Deployment

Horizontal pod autoscaler

Api Scheduler

Replicasets

https://kubernetes.io/docs/concepts/workloads/controllers/replicaset/

NEW QUESTION 132
What is FinOps?

The first step in any cloud transformation

Stage beyond DevOps or DevSecOps, where organization transition to serverless tech-nologies

Using data to make cost savings decisions about cloud usage

Specialized cloud features used by financial industries (example: banks, insurance, etc)

https://www.servicenow.com/products/it-asset-management/what-is-finops.html

NEW QUESTION 133
You’re developing a new microservice for an application running on Kubernetes. The service requires access to a database hosted in a separate Kubernetes cluster. How would you ensure secure communication between your microservice and the database?

Use a shared secret stored in an environment variable within the microservice pod

Configure a service mesh to handle encryption and authentication between the services.

Set up a VPN connection between the two Kubernetes clusters-

Use an API gateway to proxy requests between the services.

Configure a Kubernetes Ingress resource to route traffic to the database

A service mesh like Istio or Linkerd provides a layer of abstraction that can handle encryption, authentication, and authorization bewveen microservices within and across Kubernetes clusters. It allows for secure communication without exposing sensitive credentials directly within the microservice code.

NEW QUESTION 134
Which kubernetes resource type allows defining which pods are isolated when it comes to network-ing?

Network policy

Domain Name System ‘DNS’

Role Binding

Service

https://kubernetes.io/docs/concepts/services-networking/network-policies/#the-two-sorts-of-pod-isolation

NEW QUESTION 135
What kind of limitation cgroups allows?

Prioritization

Resource limiting

Accounting

None of the options

Control

Server cpu and memory

NEW QUESTION 136
You need to configure a Kubernetes cluster to use a specific DNS server. Which of the following methods can be used to achieve this?

Modifying the /etc/resolv.conf file on each node

Setting the ‘dnsPolicy’ field in the Pod spec to ‘ClusterFirst’

Configuring a custom DNS service in the cluster using a Deployment and a Service

Using the kubelet command-line argument -cluster-dns

Setting the ‘dnsConfig’ field in the Pod spec with custom DNS server details

The kubelet command-line argument -cluster-dns allows you to specify a DNS server for the cluster. This will be used by all Pods in the cluster. Alternatively, you can set the ‘dnsConfig’ field in the Pod spec to configure custom DNS servers for individual Pods. You can provide specific DNS server addresses and search domains within the ‘dnsConfig’ field.

Loading …