CKA Cluster Architecture, Installation, and Configuration 2

Question 1

Which kubeadm command is used to generate a new bootstrap token for joining worker nodes?

Accepted Answer

kubeadm token create

Answer

kubeadm join --generate-token

Answer

kubeadm init --token-ttl

Answer

kubeadm bootstrap token

Question 2

What is the default port that the kube-apiserver listens on for HTTPS traffic?

Accepted Answer

6443

Answer

8080

Answer

2379

Answer

10250

Question 3

Which component is responsible for persisting Kubernetes cluster state?

Accepted Answer

etcd

Answer

kube-scheduler

Answer

kube-controller-manager

Answer

kube-apiserver

Question 4

In a kubeadm-bootstrapped cluster, where are the static Pod manifests for control plane components located?

Accepted Answer

/etc/kubernetes/manifests

Answer

/var/lib/kubelet/manifests

Answer

/etc/kubernetes/config

Answer

/opt/kubernetes/manifests

Question 5

What flag in kubeadm init allows you to specify the pod network CIDR?

Accepted Answer

--pod-network-cidr

Answer

--service-cidr

Answer

--cluster-cidr

Answer

--network-range

Question 6

Which Kubernetes object defines the permissions granted by a ClusterRole to a set of users across all namespaces?

Accepted Answer

ClusterRoleBinding

Answer

RoleBinding

Answer

ServiceAccount

Answer

NetworkPolicy

Question 7

What is the purpose of the --authorization-mode flag on the kube-apiserver?

Accepted Answer

Defines which authorization plugins are active

Answer

Sets TLS certificate paths

Answer

Controls audit logging

Answer

Specifies admission controllers