Question 1

You are the Kubernetes cluster administrator and are concerned about Pod security. You want to enforce a policy that disallows running containers as root and prevents privilege escalation. Which two Kubernetes features can help enforce these policies? (select 2)

Options :

A : PodSecurityPolicy

B : OPA-Gatekeeper

C : RBAC

D : Service Mesh

E : Node Taints

Answer: A,B

Question 2

Your organization wants to implement fine-grained, application-level routing and also capture telemetry data like latency, request counts, and error rates. Which of the following Kubernetes-related technologies should be your primary choice?

Options :

A : Use a Service Mesh like Istio or Linkerd.

B : Implement custom logging and monitoring agents in each pod.

C : Implement Network Policies to control application-level traffic.

D : Use Ingress controllers with enhanced logging enabled.

Answer: A

Question 3

Which of the following describes a Kubernetes Service?

Options :

A : An abstraction for running short-lived tasks.

B : An abstraction layer for exposing Pods as network services.

C : A resource to manage the desired state of a container.

D : A set of rules for ingress and egress traffic.

Answer: B

Question 4

When scaling a stateful application in Kubernetes, what role does the "Headless Service" play?

Options :

A : Enables zero-downtime deployments for the stateful application.

B : Allows each Pod in the StatefulSet to have its own stable hostname.

C : Provides automatic failover and recovery for the stateful application.

D : Automatically replicates the stateful data across multiple nodes.

Answer: B

Question 5

Which of the following is not a stop on the cloud native trailmap?

Options :

A : Microservices

B : CI/CD

C : Containerization

D : Software distribution

Answer: A