Kubernetes Exam A Study Notes

Exam A Study Notes

Question 1

• The container runtime is the node component responsible for running workloads.

Question 2

• Deployment API object is the recommended way to run scalable, stateless apps on a cluster.

Question 3

• The CronJob controller creates a Job, which then creates a Pod when it's time for the CronJob to run.

Question 4

• Kubelet is an agent that runs on each node in the cluster and ensures containers are running in a Pod.

Question 5

• The default value for authorization-mode in the Kubernetes API server is RBAC (--authorization-mode=RBAC).

Question 6

• Leveraging the Kubernetes Cluster Autoscaler to automatically start and stop nodes is cost-effective for burst data processing.

Question 7

• A Kubernetes service with no cluster IP address is called a Headless Service.

Question 8

• CI/CD stands for Continuous Integration / Continuous Development.

Question 9

• Secrets in the Kubernetes API use base64 encoding for the default level of data protection.

Question 10

• Kube-proxy forwards data to the correct endpoints for Services within a cluster.

Question 11

• A stable Kubernetes API element should be supported for at least 12 months after deprecation.

Question 12

• k3s is the name of the lightweight Kubernetes distribution built for IoT and edge computing.

Question 13

• Kubernetes Cluster Autoscaler allows automatic management of the number of nodes in a cluster.

Question 14

• Kubernetes can use the Open Policy Agent (OPA) to validate requests and apply policies.

Question 15

• In cloud-native Infrastructure as Code (IaC) is the management and provisioning of infrastructure through code rather than manual processes.

Question 16

• In a Serverless framework developers no longer handle capacity, deployments, scaling, fault tolerance, and OS.

Question 17

• Dynamic scheduling is associated with container orchestration.

Question 18

• StatefulSet workload requires a headless service while deploying into the namespace.

Question 19

• Helm is a package manager for Kubernetes applications.

Question 20

• To load and generate data required before the Pod startup, use an init container with shared file storage.

Question 21

• The correct kubectl command to display logs in real time is: kubectl logs -f test-container-1.

Question 22

• GitOps tools like Argo CD and Flux continuously compare the desired state in Git with the actual production state.

Question 23

• The DaemonSet Kubernetes resource workload ensures that all, or some, nodes run a copy of a Pod.

Question 24

• CRD stands for Custom Resource Definition.

Question 25

• SIG stands for Special Interest Group.

Question 26

• The order of 4C's in Cloud Native Security, starting with the layer that a user has the most control over is Code -> Container -> Cluster -> Cloud.

Question 27

• runsc and kata container runtimes provides additional sandboxed isolation and elevated security

Question 28

• Service Mesh Interface (SMI) is the common standard for Service Meshes.

Question 29

• Ingress exposes routes from outside the cluster to services in the cluster.

Question 30

• Cloud native service discovery is a mechanism for apps and microservices to locate each other on a network.

Question 31

• A service proxy and control plane are common components in a service mesh.

Question 32

• Rook is a storage operator in Kubernetes that can help the system to self-scale and self-heal.

Question 33

• apiVersion, kind, and metadata fields must exist in any Kubernetes object YAML file.

Question 34

• Creating a monitoring baseline for an application is a responsibility of an SRE (Site Reliability Engineer).

Question 35

• The initial namespaces that Kubernetes starts with are default, kube-system, kube-public, and kube-node-lease.

Question 36

• A probe within Kubernetes is a diagnostic performed periodically by the kubelet on a container.

Question 37

• StatefulSet is the Kubernetes feature to guard against split-brain scenarios with your distributed application.

Question 38

• A CNI must support Network Policies to control specific traffic flows for workloads running in Kubernetes.

Question 39

• The main role of the Kubernetes DNS within a cluster is to provide consistent DNS Names for Pods and Services for workloads that need to communicate with each other.

Question 40

• The Cloud Controller Manager Kubernetes component is failing when the external-ip is stuck in the "Pending" state when trying to create a Service of type LoadBalancer.

Question 41

• Every cloud-native application is characterized by Resiliency, Agility, Operability, and Observability.

Question 42

• CNCF stands for Cloud Native Computing Foundation.

Question 43

• Kubernetes supports multiple virtual clusters backed by the same physical cluster. These virtual clusters are called namespaces.

Question 44

• The Kubernetes API enables communication between end-users, different parts of the Kubernetes cluster, and external components.

Question 45

• The command "kubectl api-resources" will list the resource types that exist within a cluster.

Question 46

• The Cloud Controller Manager is part of the Kubernetes Control Plane.

Question 47

• The Cloud Controller Manager is part of the Kubernetes Control Plane.

Question 48

• A key feature of a container network is allowing containers running on separate hosts to communicate.

Question 49

• Progress for an updated Deployment/DaemonSets/StatefulSets can be monitored using kubectl rollout status.

Question 50

• The goal of load balancing is to automatically distribute requests across instances of an application.

Question 51

• Deployments manage ReplicaSets and provide declarative updates to Pods.

Question 52

• Pod memory requests, node taints, and Pod affinity influence the Kubernetes scheduler when it places Pods on nodes.

Question 53

• Gauge is the core metric type in Prometheus used to represent a single numerical value that can go up and down.

Question 54

• Labels are the primary mechanism to identify grouped objects in a Kubernetes cluster.

Question 55

• The Kubernetes resource used to expose an application is called a Service.

Question 56

• A DaemonSet ensures a specific set of nodes run a copy of a Pod.

Question 57

• Traces is the telemetry component representing related distributed events encoding the end-to-end request flow.

Question 58

• CRI-O is responsible for running containers in the Kubernetes platform.

Question 59

• Services and Pods in Kubernetes are YAML objects.

Question 60

• Kube-proxy handles network communications inside and outside of a cluster, using OS packet filtering.

Question 61

• Kube-apiserver exposes the programmatic interface used to create, manage, and interact with Kubernetes objects.

Question 62

• Services without selectors require manual creation of Endpoints.

Question 63

• The command "kubectl explain" retrieves documentation and field definitions for a Kubernetes resource

Question 64

• Linkerd is a lightweight tool for managing traffic flow between services, enforcing access policies and aggregate telemetry data.

Question 65

• ConfigMap Kubernetes resource uses immutable: true boolean field.

Question 66

• Pods can communicate with all other Pods without NAT.

Question 67

• Pod is the resource type used to package sets of containers for scheduling in a cluster.

Question 68

• Kubernetes Service can expose multiple ports where you must specify an unambiguous name for each port.

Question 69

• Site Reliability Engineers are typically responsible for defining, testing, and running an incident management process.

Question 70

• Rolling update is the default deployment strategy in Kubernetes.

Question 71

• The command "kubectl explain deployment.spec.replicas" provides information about the field replicas within the spec resource of a deployment object.

Question 72

• Outlining the project's "terms of engagement" is a responsibility of the governance board of an open-source project.

Question 73

• A NetworkPolicy in Kubernetes classifies Pods as isolated and non-isolated.

Question 74

• Network throughput and disk I/O are the most important resources to guarantee the performance of an etcd cluster.

Question 75

• To deploy a workload to Kubernetes without additional tools, create a manifest and apply it with kubectl.

Question 76

• "kubectl exec" is how you perform a command in a running container.

Question 77

• A headless service is created by specifying '.spec.clusterIP: None'

Question 78

• To use dynamic storage provisioning, a user has to include an existing storage class in their PersistentVolumeClaim.

Question 79

• Scheduling, scaling, and manage the health of containers, are tasks performed by a container orchestration tool.

Question 80

• Hybrid cloud a cloud native architecture that uses a combination of services running in different public and private clouds, including on-premises data centers.

Question 81

• A Kubernetes Service Endpoint is an object that gets IP addresses of individual Pods assigned to it.

Question 82

• Cloud Native Architecture is important because it removes constraints to rapid innovation.

Question 83

• A Pod is the smallest deployable unit of computing in Kubernetes.

Question 84

• Answer not provided

Question 85

• Environment variables and DNS are the two primary modes for Service discovery within a Kubernetes cluster.

Question 86

• NET_BIND_SERVICE is an option to add to a container using the Restricted policy.

Question 87

• Methods that can be used to scale a deployment are: kubectl scale deployment and kubectl edit deployment.

Question 88

• Answer not provided

Question 89

• Containerd is the industry-standard container runtime with an emphasis on simplicity, robustness, and portability.

Question 90

• Vertical scaling an application deployment is best described as the act of adding/removing resources to applications to meet demand.

Question 91

• Answer not provided

Question 92

• Serverless computing is a computing method of providing backend services on an as-used basis.

Question 93

• The purpose of the CRI (Container Runtime Interface) is to provide an interface allowing Kubernetes to support pluggable container runtimes.

Question 94

• Answer not provided

Question 95

• Open Container Initiative (OCI) in CNCF develops specifications for industry standards around container formats and runtimes.

Question 96

• v1alpha1, v2beta3, v2 includes valid API versions.

Question 97

• To view the snapshot of previously terminated ruby container logs from Pod web-1, run the following command: kubectl logs -p -c ruby web-1

Question 98

• Service in Kubernetes is an abstraction that defines a logical set of Pods and a policy by which to access them.

Question 99

• Six hosts are required to set up a highly available Kubernetes cluster when using an external etcd topology.

Question 100

• When a new Pod is created and has no assigned node, the kube-scheduler will assign the Pod to a node.

Question 101

• Answer not provided

Question 102

• PersistentVolumeClaim is the resource you use to attach a volume in a Pod.

Question 103

• etcd is the key-value store used to persist Kubernetes cluster data.

Question 104

• Answer not provided

Question 105

• Answer not provided

Question 106

• Answer not provided

Question 107

• Answer not provided

Question 108

• Answer not provided

Question 109

• Answer not provided

Question 110

• Answer not provided