Skip to main content
DevOps

Certified Kubernetes Administrator (CKA) - 100 Questions

By Webmaster Certland ❤️ 0 likes

Prepare for the CNCF Certified Kubernetes Administrator (CKA) exam with 100 practice questions covering all 5 official domains. This question bank validates your ability to install, configure, and manage production-grade Kubernetes clusters. Topics include cluster architecture and installation, workload and scheduling, services and networking, storage configuration, and cluster troubleshooting. The CKA is a performance-based, hands-on certification highly valued by DevOps engineers, site reliability engineers, and platform engineers. Practicing scenario-based questions on CertLand reinforces the operational knowledge and troubleshooting skills required to pass the CKA exam.

👁️ Free Preview (5 of 100 questions)

1. A cluster administrator needs to understand which control plane component is responsible for watching the cluster state and making changes to move the current state toward the desired state. Which component fulfills this role?

A kube-apiserver
B kube-controller-manager
C kube-scheduler
D etcd

2. A platform engineer is auditing the control plane and needs to identify which component stores the entire cluster state, including all objects such as pods, services, and secrets. Which component should they inspect?

A kube-apiserver
B kube-controller-manager
C etcd
D kubelet

3. A DevOps engineer needs to back up the etcd cluster on a kubeadm-provisioned control plane node. The etcd certificates are located at /etc/kubernetes/pki/etcd/. Which command correctly creates a snapshot?

A ETCDCTL_API=3 etcdctl snapshot save /backup/etcd.db --endpoints=https://127.0.0.1:2379 --cacert=/etc/kubernetes/pki/etcd/ca.crt --cert=/etc/kubernetes/pki/etcd/server.crt --key=/etc/kubernetes/pki/etcd/server.key
B kubectl exec -n kube-system etcd-controlplane -- etcdctl snapshot save /backup/etcd.db
C ETCDCTL_API=3 etcdctl snapshot save /backup/etcd.db --endpoints=https://127.0.0.1:2379
D ETCDCTL_API=3 etcdctl snapshot restore /backup/etcd.db --endpoints=https://127.0.0.1:2379 --cacert=/etc/kubernetes/pki/etcd/ca.crt --cert=/etc/kubernetes/pki/etcd/server.crt --key=/etc/kubernetes/pki/etcd/server.key

4. A cluster administrator has initialized a new control plane with `kubeadm init` and now needs to join a worker node. Which kubeadm command on the worker node correctly joins it to the cluster?

A kubeadm init --control-plane-endpoint=192.168.1.10:6443
B kubeadm join 192.168.1.10:6443 --token abc123.xyz --discovery-token-ca-cert-hash sha256:abcdef1234
C kubeadm token create --print-join-command
D kubectl join 192.168.1.10:6443 --token abc123.xyz

5. You need to grant a developer read-only access to pods and deployments in a single namespace called 'dev'. Which combination of RBAC objects is correct?

A ClusterRole + ClusterRoleBinding
B ClusterRole + RoleBinding
C Role + RoleBinding
D Role + ClusterRoleBinding

Want to test yourself for real?

Create a free account and run our exam simulation engine.

Free No credit card
  • Simulation engine
  • Up to 10 questions per attempt
  • Score & basic stats
Create free account Already have an account? Sign in
Best
Premium 7-day trial
  • All 100 questions
  • Detailed explanations
  • Smart Practice + Focus Mode
⭐ Start 7-day free trial

Related Exams

Discussion

No comments yet. Be the first to start the discussion!

Sign in to join the discussion.