Home / Linux Foundation / CKAD

Linux Foundation CKAD Practice Test - Questions Answers, Page 2

Question list

List of questions

Question 11

(0)

Context As a Kubernetes application developer you will often find yourself needing to update a running application. Task Please complete the following: • Update the app deployment in the kdpd0

Question 12

(0)

Context You have been tasked with scaling an existing deployment for availability, and creating a service to expose the deployment within your infrastructure. Task Start with the deployment nam

Question 13

(0)

Context A container within the poller pod is hard-coded to connect the nginxsvc service on port 90 . As this port changes to 5050 an additional container needs to be added to the poller pod which

Question 14

(0)

Context Developers occasionally need to submit pods that run periodically. Task Follow the steps below to create a pod that will start at a predetermined time and]which runs to completion only

Question 15

(0)

Context Task You have rolled out a new pod to your infrastructure and now you need to allow it to communicate with the web and storage pods but nothing else. Given the running pod kdsn00201 -new

Question 16

(0)

Context A user has reported an aopticauon is unteachable due to a failing livenessProbe . Task Perform the following tasks: • Find the broken pod and store its name and namespace to /opt/KDOB0

Question 17

(0)

Context A project that you are working on has a requirement for persistent data to be available. Task To facilitate this, perform the following tasks: • Create a file on node sk8s-node-0 at /o

Question 18

(0)

Context Given a container that writes a log file in format A and a container that converts log files from format A to format B, create a deployment that runs both containers such that the log fil

Question 19

(0)

Context Task A Deployment named backend-deployment in namespace staging runs a web application on port 8081.

Question 20

(0)

Context Task: Update the Deployment app-1 in the frontend namespace to use the existing ServiceAccount app.

Related questions

Context You are tasked to create a ConfigMap and consume the ConfigMap in a pod using a volume mount. Task Please complete the following: • Create a ConfigMap named another-config containing the key/value pair: key4/value3 • start a pod named nginx-configmap containing a single container using the nginx image, and mount the key you just created into the pod under directory /also/a/path

Context Task Create a new deployment for running.nginx with the following parameters; • Run the deployment in the kdpd00201 namespace. The namespace has already been created • Name the deployment frontend and configure with 4 replicas • Configure the pod with a container image of lfccncf/nginx:1.13.7 • Set an environment variable of NGINX__PORT=8080 and also expose that port for the container above

Context Task: The pod for the Deployment named nosql in the craytisn namespace fails to start because its container runs out of resources. Update the nosol Deployment so that the Pod: 1) Request 160M of memory for its Container 2) Limits the memory to half the maximum memory constraint set for the crayfah name space.

Context Task: A Dockerfile has been prepared at -/human-stork/build/Dockerfile 1) Using the prepared Dockerfile, build a container image with the name macque and lag 3.0. You may install and use the tool of your choice. 2) Using the tool of your choice export the built container image in OC-format and store it at - /human stork/macque 3.0 tar

Context Task: A pod within the Deployment named buffale-deployment and in namespace gorilla is logging errors. 1) Look at the logs identify errors messages. Find errors, including User “system:serviceaccount:gorilla:default” cannot list resource “deployment” […] in the namespace “gorilla” 2) Update the Deployment buffalo-deployment to resolve the errors in the logs of the Pod. The buffalo-deployment ‘S manifest can be found at -/prompt/escargot/buffalo-deployment.yaml

Context Task You are required to create a pod that requests a certain amount of CPU and memory, so it gets scheduled to-a node that has those resources available. • Create a pod named nginx-resources in the pod-resources namespace that requests a minimum of 200m CPU and 1Gi memory for its container • The pod should use the nginx image • The pod-resources namespace has already been created

Context You are asked to prepare a Canary deployment for testing a new application release. Task: A Service named krill-Service in the goshark namespace points to 5 pod created by the Deployment named current-krill-deployment 1) Create an identical Deployment named canary-kill-deployment, in the same namespace. 2) Modify the Deployment so that: -A maximum number of 10 pods run in the goshawk namespace. -40% of the krill-service ‘s traffic goes to the canary-krill-deployment pod(s)

Context Task: Create a Deployment named expose in the existing ckad00014 namespace running 6 replicas of a Pod. Specify a single container using the ifccncf/nginx: 1.13.7 image Add an environment variable named NGINX_PORT with the value 8001 to the container then expose port 8001

Context A pod is running on the cluster but it is not responding. Task The desired behavior is to have Kubemetes restart the pod when an endpoint returns an HTTP 500 onthe /healthz endpoint. The service, probe-pod, should never send traffic to the pod while it is failing. Please complete the following: • The application has an endpoint, /started, that will indicate if it can accept traffic by returning an HTTP 200. If the endpoint returns an HTTP 500, the application has not yet finished initialization. • The application has another endpoint /healthz that will indicate if the application is still working as expected by returning an HTTP 200. If the endpoint returns an HTTP 500 the application is no longer responsive. • Configure the probe-pod pod provided to use these endpoints • The probes should use port 8080

Context Task: Update the Pod ckad00018-newpod in the ckad00018 namespace to use a NetworkPolicy allowing the Pod to send and receive traffic only to and from the pods web and db

Question 11

Context

As a Kubernetes application developer you will often find yourself needing to update a running application.

Task

Please complete the following:

• Update the app deployment in the kdpd00202 namespace with a maxSurge of 5% and a maxUnavailable of 2%

• Perform a rolling update of the web1 deployment, changing the Ifccncf/ngmx image version to 1.13

• Roll back the app deployment to the previous version

See the solution below.

Show Answer Comment (0)

Question 12

Context

You have been tasked with scaling an existing deployment for availability, and creating a service to expose the deployment within your infrastructure.

Task

Start with the deployment named kdsn00101-deployment which has already been deployed to the namespace kdsn00101 . Edit it to:

• Add the func=webFrontEnd key/value label to the pod template metadata to identify the pod for the service definition

• Have 4 replicas

Next, create ana deploy in namespace kdsn00l01 a service that accomplishes the following:

• Exposes the service on TCP port 8080

• is mapped to me pods defined by the specification of kdsn00l01-deployment

• Is of type NodePort

• Has a name of cherry

See the solution below.

Show Answer Comment (0)

A container within the poller pod is hard-coded to connect the nginxsvc service on port 90 . As this port changes to 5050 an additional container needs to be added to the poller pod which adapts the container to connect to this new port. This should be realized as an ambassador container within the pod.

Task

• Update the nginxsvc service to serve on port 5050.

• Add an HAproxy container named haproxy bound to port 90 to the poller pod and deploy the enhanced pod. Use the image haproxy and inject the configuration located at

/opt/KDMC00101/haproxy.cfg, with a ConfigMap named haproxy-config, mounted into the container so that haproxy.cfg is available at /usr/local/etc/haproxy/haproxy.cfg. Ensure that you update the args of the poller container to connect to localhost instead of nginxsvc so that the connection is correctly proxied to the new service endpoint. You must not modify the port of the endpoint in poller's args . The spec file used to create the initial poller pod is available in

/opt/KDMC00101/poller.yaml

See the solution below.

Show Answer Comment (0)

Question 14

Context

Developers occasionally need to submit pods that run periodically.

Task

Follow the steps below to create a pod that will start at a predetermined time and]which runs to completion only once each time it is started:

• Create a YAML formatted Kubernetes manifest /opt/KDPD00301/periodic.yaml that runs the following shell command: date in a single busybox container. The command should run every minute and must complete within 22 seconds or be terminated oy Kubernetes. The Cronjob namp and container name should both be hello

• Create the resource in the above manifest and verify that the job executes successfully at least once

See the solution below.

Show Answer Comment (0)

Question 15

Context

Task

You have rolled out a new pod to your infrastructure and now you need to allow it to communicate with the web and storage pods but nothing else. Given the running pod kdsn00201 -newpod edit it to use a network policy that will allow it to send and receive traffic only to and from the web and storage pods.

See the solution below.

Show Answer Comment (0)

Question 16

Context

A user has reported an aopticauon is unteachable due to a failing livenessProbe .

Task

Perform the following tasks:

• Find the broken pod and store its name and namespace to /opt/KDOB00401/broken.txt in the format:

The output file has already been created

• Store the associated error events to a file /opt/KDOB00401/error.txt, The output file has already been created. You will need to use the -o wide output specifier with your command

• Fix the issue.

See the solution below.

Show Answer Comment (0)

Question 17

Context

A project that you are working on has a requirement for persistent data to be available.

Task

To facilitate this, perform the following tasks:

• Create a file on node sk8s-node-0 at /opt/KDSP00101/data/index.html with the content Acct=Finance

• Create a PersistentVolume named task-pv-volume using hostPath and allocate 1Gi to it, specifying that the volume is at /opt/KDSP00101/data on the cluster's node. The configuration should specify the access mode of ReadWriteOnce . It should define the StorageClass name exam for the PersistentVolume , which will be used to bind PersistentVolumeClaim requests to this PersistenetVolume.

• Create a PefsissentVolumeClaim named task-pv-claim that requests a volume of at least 100Mi and specifies an access mode of ReadWriteOnce

• Create a pod that uses the PersistentVolmeClaim as a volume with a label app: my-storage-app mounting the resulting volume to a mountPath /usr/share/nginx/html inside the pod

See the solution below.

Show Answer Comment (0)

Question 18

Context

Given a container that writes a log file in format A and a container that converts log files from format A to format B, create a deployment that runs both containers such that the log files from the first container are converted by the second container, emitting logs in format B.

Task:

• Create a deployment named deployment-xyz in the default namespace, that:

• Includes a primary lfccncf/busybox:1 container, named logger-dev

• includes a sidecar Ifccncf/fluentd:v0.12 container, named adapter-zen

• Mounts a shared volume /tmp/log on both containers, which does not persist when the pod is deleted

• Instructs the logger-dev container to run the command

which should output logs to /tmp/log/input.log in plain text format, with example values:

• The adapter-zen sidecar container should read /tmp/log/input.log and output the data to

/tmp/log/output.* in Fluentd JSON format. Note that no knowledge of Fluentd is required to complete this task: all you will need to achieve this is to create the ConfigMap from the spec file provided at /opt/KDMC00102/fluentd-configma p.yaml , and mount that ConfigMap to /fluentd/etc in the adapter-zen sidecar container

See the solution below.

Show Answer Comment (0)

Question 19

Context

Task

A Deployment named backend-deployment in namespace staging runs a web application on port 8081.

See the solution below.

Show Answer Comment (0)

Question 20

Context

Task:

Update the Deployment app-1 in the frontend namespace to use the existing ServiceAccount app.

See the solution below.

Show Answer Comment (0)

Total 32 questions

1 2 3 4

Go to page: of 4

apiVersion: networking.k8s.i o/v1
	kind: NetworkPolicy
	metadata:
	name: internal-policy
	namespace: default
	spec:
	podSelector:
	matchLabels:
	name: internal
	policyTypes:
	- Egress
	- Egress
	ingress:
	- {}

	egress:
	- to:
	- podSelector:
	matchLabels:
	name: mysql
	ports:
	- protocol: TCP
	port: 3306

	- to:
	- podSelector:
	matchLabels:
	name: payroll
	ports:
	- protocol: TCP
	port: 8080

	- ports:
	- port: 53
	protocol: UDP
	- port: 53
	protocol: TCP