Get CKA Products Practice Material for CKA Exam Question Preparation [Q35-Q58]

Rate this post

Get CKA Products Practice Material for CKA Exam Question Preparation

Most Reliable Linux Foundation CKA Training Materials

The CKA certification is recognized globally and is highly regarded by employers in the IT industry. Holding a CKA certification demonstrates an individual’s ability to manage Kubernetes clusters effectively, which is a highly sought-after skill in today’s job market. The CKA certification also provides individuals with access to a global community of certified professionals who can share knowledge and best practices in Kubernetes administration. The CKA exam is a valuable investment for individuals who want to enhance their career prospects and stay up-to-date with the latest technologies in the industry.

NO.35 You have a Deployment named ‘my-app-deployment’ running a web application. The Deployment’s Service is exposed using a NodePort service. You need to configure a new Ingress resource that allows traffic to reach the web application through a specific domain name. How would you set up the Ingress configuration?

NO.36 You are running a stateful application on Kubernetes with a Deployment that manages five pods. Each pod has a persistent volume claim (PVC) that mounts a volume to store application dat a. You need to ensure that the pods are always deployed in the same order and that data is consistently accessed from the same PVC. How can you achieve this using Kubernetes features?

NO.37 You have a Kubernetes cluster with multiple namespaces. You need to create a shared network policy that allows pods in a specific namespace (‘dev’) to communicate with pods in another namespace (‘prod’), but only for specific ports. How would you configure this shared network policy?

NO.38 Get all the pods with label “env”

NO.39 From the pod label name=cpu-utilizer, find pods running high CPU workloads and write the name of the pod consuming most CPU to the file /opt/KUTR00102/KUTR00102.txt (which already exists).

NO.40 You are deploying a microservices application on Kubernetes where each service has its own dedicated namespace. You want to implement a robust network security policy that allows communication between specific services only. How can you achieve this using NetworkPolicies?

NO.41 Score: 4%

Task
Check to see how many nodes are ready (not including nodes tainted NoSchedule ) and write the number to /opt/KUSC00402/kusc00402.txt.

NO.42 Create a busybox pod that runs the command “env” and save the output to “envpod” file

NO.43 Create an nginx pod which loads the secret as environment variables

// create a yml file
kubectl run nginx –image=nginx –restart=Never –dry-run -o
yaml > nginx.yml
// add env section below and create
vim nginx.yaml
apiVersion: v1
kind: Pod
metadata:
labels:
run: nginx
name: nginx
spec:
containers:
– image: nginx
name: nginx
envFrom:
– secretRef:
name: my-secret
restartPolicy: Never
kubectl apply -f nginx.yaml
//verify
kubectl exec -it nginx – env

// create a yml file
kubectl run nginx –image=nginx –restart=Never –dry-run -o
yaml > nginx.yml
// add env section below and create
vim nginx.yaml
run: nginx
name: nginx
spec:
containers:
– image: nginx
name: nginx
envFrom:
– secretRef:
name: my-secret
restartPolicy: Never
kubectl apply -f nginx.yaml
//verify
kubectl exec -it nginx – env

NO.44 Check the image version in pod without the describe command

NO.45 Create a Pod with three busy box containers with commands “ls; sleep 3600;”, “echo Hello World; sleep 3600;” and “echo this is the third container; sleep 3600” respectively and check the status

// first create single container pod with dry run flag
kubectl run busybox –image=busybox –restart=Always –dry-run
-o yaml — bin/sh -c “sleep 3600; ls” > multi-container.yaml
// edit the pod to following yaml and create it
apiVersion: v1
kind: Pod
metadata:
labels:
run: busybox
name: busybox
spec:
containers:
– args:
– bin/sh
– -c
– ls; sleep 3600
– echo Hello world; sleep 3600
image: busybox
name: busybox-container-2
– args:
– bin/sh
– -c
– echo this is third container; sleep 3600
image: busybox
name: busybox-container-3
restartPolicy: Always
// Verify
Kubectl get pods

// first create single container pod with dry run flag
kubectl run busybox –image=busybox –restart=Always –dry-run
-o yaml — bin/sh -c “sleep 3600; ls” > multi-container.yaml
// edit the pod to following yaml and create it
apiVersion: v1
kind: Pod
metadata:
labels:
run: busybox
name: busybox
spec:
containers:
– args:
– bin/sh
– -c
– ls; sleep 3600
image: busybox
name: busybox-container-1
– args:
– bin/sh
– -c
– echo Hello world; sleep 3600
image: busybox
name: busybox-container-2
– args:
– bin/sh
– -c
– echo this is third container; sleep 3600
image: busybox
name: busybox-container-3
restartPolicy: Always
// Verify
Kubectl get pods

NO.46 Create a busybox pod that runs the command “env” and save the output to “envpod” file

NO.47 You are setting up a persistent volume to host a MySQL database, but you want to ensure data consistency and availability. You have multiple nodes in your Kubernetes cluster. Describe the volume mode, access mode, and reclaim policy you would use for this volume.

NO.48 You have a deployment that uses a PersistentVolumeClaim for its storage. The deployment is scaled to 5 replicas. You notice that each pod is using the same volume, leading to data corruption. Explain why this is happening and how you can fix the problem.

NO.49 A bootstrap USB flash drive has been prepared using a Linux workstation to load the initial configuration of a Palo Alto Networks firewall. The USB flash drive was formatted using file system ntfs and the initial configuration is stored in a file named init-cfg.txt.
The contents of Init-cfg.txt in the USB flash drive are as follows:
type=static
ip-address=10.5.107.19
default-gateway=10.5.107.1
netmask=255.255.255.0
Ipv6-address=2001:400:100::1/64
ipv6-default-gateway=2001:400:100::2
hostname=Ca-FW-DC1
panorama-server=10.5.107.20
panorama-server-2=10.5.107.21
tplname=FINANCE TG4
dgname=finance_dg
dns-primary=10.5.6.6
op-command-modes multi-vsys.jumbo-frame
dhcp-send-hostname=no
dhcp-send-client-id=no
dhcp-accept-server-hostname=no
dhcp-accept-server-domain=no
The USB flash drive has been inserted in the firewalls’ USB port, and the firewall has been powered on.Upon boot, the firewall fails to begin the bootstrapping process. The failure is caused because:

There must be commas between the parameter names and their values instead of the equal symbols

nit-cfg bit is an incorrect filename the correct filename should be init-ofg.xml

The USB must be formatted using the ext4 file system

The USB drive has been formatted with an unsupported file system

The bootstrap.xml file is a required file, but it is missing

NO.50 Create a ETCD backup of kubernetes cluster
Note : You don’t need to memorize command, refer –
https://kubernetes.io/docs/tasks/administer-cluster/configureupgrade-etcd/ during exam

ETCDCTL_API=3 etcdctl –endpoints=[ENDPOINT] –cacert=[CA CERT]
–cert=[ETCD SERVER CERT] –key=[ETCD SERVER KEY] snapshot save
[BACKUP FILE NAME]
In exam, cluster setup is done with kubeadm , this means ETCD
used by the kubernetes cluster is coming from static pod.
kubectl get pod -n kube-system
kubectl describe pod etcd-master -n kube-system
You can locate the information on
endpoint: – advertise-client-urls=https://172.17.0.15:2379
ca certificate: – trusted-cafile=/etc/kubernetes/pki/etcd/ca.crt
server certificate : – certfile=/etc/kubernetes/pki/etcd/server.crt
key: – key-file=/etc/kubernetes/pki/etcd/server.key
To Create backup
export ETCDCTL_API=3
(or)
ETCDCTL_API=3 etcdctl ETCDCTL_API=3 etcdctl —
endpoints=https://172.17.0.15:2379 —
cacert=/etc/kubernetes/pki/etcd/ca.crt —
cert=/etc/kubernetes/pki/etcd/server.crt —
key=/etc/kubernetes/pki/etcd/server.key snapshot save etcdsnapshot.db
//Verify
ETCDCTL_API=3 etcdctl –write-out=table snapshot status
snapshot.db

ETCDCTL_API=3 etcdctl –endpoints=[ENDPOINT] –cacert=[CA CERT]
–cert=[ETCD SERVER CERT] –key=[ETCD SERVER KEY] snapshot save
[BACKUP FILE NAME]
In exam, cluster setup is done with kubeadm , this means ETCD
used by the kubernetes cluster is coming from static pod.
kubectl get pod -n kube-system
kubectl describe pod etcd-master -n kube-system
You can locate the information on
endpoint: – advertise-client-urls=https://172.16.0.18:2379
ca certificate: – trusted-cafile=/etc/kubernetes/pki/etcd/ca.crt
server certificate : – certfile=/etc/kubernetes/pki/etcd/server.crt
key: – key-file=/etc/kubernetes/pki/etcd/server.key
To Create backup
export ETCDCTL_API=3
(or)
ETCDCTL_API=3 etcdctl ETCDCTL_API=3 etcdctl —
endpoints=https://172.17.0.15:2379 —
key=/etc/kubernetes/pki/etcd/server.key snapshot save etcdsnapshot.db
//Verify
ETCDCTL_API=3 etcdctl –write-out=table snapshot status
snapshot.db

NO.51 Modify “hello-job” and make it run 10 times one after one and 5 times parallelism: 5

kubectl create job hello-job –image=busybox –dry-run -o yaml
— echo “Hello I am from job” > hello-job.yaml
// edit the yaml file to add completions: 16 and
kubectl create -f hello-job.yaml
YAML File:
apiVersion: batch/v1
kind: Job
metadata:
name: hello-job
spec:
completions: 16
parallelism: 5
template:
metadata:
spec:
containers:
– command:
– echo
– Hello I am from job
image: busybox
name: hello-job
restartPolicy: Never

kubectl create job hello-job –image=busybox –dry-run -o yaml
— echo “Hello I am from job” > hello-job.yaml
// edit the yaml file to add completions: 10 and
kubectl create -f hello-job.yaml
YAML File:
apiVersion: batch/v1
kind: Job
metadata:
name: hello-job
spec:
completions: 10
parallelism: 5
template:
metadata:
spec:
containers:
– command:
– echo
– Hello I am from job
image: busybox
name: hello-job
restartPolicy: Never

NO.52 Create a Kubernetes secret as follows:
* Name: super-secret
* password: bob
Create a pod named pod-secrets-via-file, using the redis Image, which mounts a secret named super-secret at
/secrets.
Create a second pod named pod-secrets-via-env, using the redis Image, which exports password as CONFIDENTIAL.

NO.53 You must connect to the correct host.
Failure to do so may result in a zero score.
[candidate@base] $ ssh Cka000055
Task
Verify the cert-manager application which has been deployed to your cluster .
Using kubectl, create a list of all cert-manager Custom Resource Definitions (CRDs ) and save it to ~/resources.yaml .
You must use kubectl ‘s default output format.
Do not set an output format.
Failure to do so will result in a reduced score.
Using kubectl, extract the documentation for the subject specification field of the Certificate Custom Resource and save it to ~/subject.yaml.

NO.54 You have a Deployment named ‘my-app’ running a web application with three replicas. The application is exposed using a ‘LoadBalancer’ service. You want to create a ‘ClusterlP’ service for internal communication within the Kubernetes cluster and route traffic from the ‘LoadBalancer’ service to the ‘ClusterlP’ service.

NO.55 Create a Cronjob with busybox image that prints date and hello from kubernetes cluster message for every minute

CronJob Syntax:
* –> Minute
* –> Hours
* –> Day of The Month
* –> Month
* –> Day of the Week
*/1 * * * * –> Execute a command every one minutes.
vim date-job.yaml
apiVersion: batch/v1beta1
kind: CronJob
metadata:
name: date-job
spec:
schedule: “*/1 * * * *”
jobTemplate:
spec:
template:
spec:
containers:
– name: hello
image: busybox
args:
– /bin/sh
– -c
– date; echo Hello from the Kubernetes cluster
restartPolicy: OnFailure
kubectl apply -f date-job.yaml
//Verify
kubectl get cj date-job -o yaml

CronJob Syntax:
* –> Minute
* –> Hours
* –> Day of The Month
* –> Month
* –> Day of the Week
*/1 * * * * –> Execute a command every one minutes.
vim date-job.yaml
apiVersion: batch/v1beta1
kind: CronJob
metadata:
name: date-job
spec:
schedule: “*/1 * * * *”
jobTemplate:
spec:
template:
– /bin/sh
– -c
– date; echo Hello from the Kubernetes cluster
restartPolicy: OnFailure
kubectl apply -f date-job.yaml
//Verify
kubectl get cj date-job -o yaml

NO.56 Score: 4%

Task
Create a persistent volume with name app-data , of capacity 1Gi and access mode ReadOnlyMany. The type of volume is hostPath and its location is /srv/app-data .

NO.57 You have a Kubernetes cluster with multiple namespaces. You want to create a ClusterRole that grants users in the “admins” group the ability to create, delete, and list Pods in any namespace, but restricts them from managing namespaces themselves.

NO.58 Create a namespace called ‘development’ and a pod with image nginx called nginx on this namespace.

The CKA certification is an essential credential for professionals who want to demonstrate their proficiency in Kubernetes administration. Certified Kubernetes Administrator (CKA) Program Exam certification is recognized worldwide and is highly valued by organizations that use Kubernetes in their production environments. Certified Kubernetes Administrator (CKA) Program Exam certification provides a competitive edge to professionals and helps them stand out in a crowded job market. The CKA program also provides candidates with access to a community of certified professionals, resources, and tools that can help them advance their careers in Kubernetes administration.

LATEST CKA Exam Practice Material: https://www.real4exams.com/CKA_braindumps.html

Get CKA Products Practice Material for CKA Exam Question Preparation [Q35-Q58]

Leave a Reply Cancel reply