Question 1

What cloud-native construct does a kubernetes pod wrap?

Options :

A : Container

B : Virtual Machine (VM)

C : side car process

D : Docker image

Answer: A

Question 2

Your company requires that container images used in the Kubernetes cluster must come from an approved registry and have undergone vulnerability scanning. Which security feature can you use to enforce this requirement?

Options :

A : Implement a custom webhook to check image vulnerability reports before pod scheduling.

B : Configure the cluster with a whitelist of approved image registries.

C : Utilize Resource Quotas to limit the image sources.

D : Use a Validating Admission Controller to check image sources.

Answer: D

Question 3

What Kubernetes component will continue to retry execution of the Pods until a specified number of them successfully terminate?

Options :

A : DaemonJobs

B : CronJobs

C : Jobs

D : RetryJobs

Answer: C

Question 4

Which of the following Istio components is primarily responsible for enforcing policies like rate limiting and access control in the service mesh?

Options :

A : Envoy Proxy

B : Istio Gateway

C : Istio-Operator

D : Mixer

Answer: D

Question 5

You are managing a Kubernetes cluster that has multiple environments (development, staging, production). You need to apply different ConfigMaps for each environment without changing the Pod specification. Which two Kubernetes features would you use to accomplish this? (select 2)

Options :

A : Kustomization

B : Helm charts with variables

C : Environment Variables

D : API Aggregation Layer

E : Dynamic Admission Control

Answer: A,B

Smartly Prepare Exam with Free Online KCNA Practice Test

Buying Options: