CKA Cluster Architecture, Installation, and Configuration 3

Question 1

When upgrading a cluster with kubeadm, what is the correct order of operations?

Accepted Answer

Upgrade control plane first, then workers

Answer

Upgrade workers first, then control plane

Answer

Upgrade etcd first, then drain all nodes simultaneously

Answer

Upgrade all nodes simultaneously using kubeadm upgrade all

Question 2

Which command drains a node and marks it as unschedulable before maintenance?

Accepted Answer

kubectl drain

Answer

kubectl cordon

Answer

kubectl taint

Answer

kubectl delete node

Question 3

In a high-availability control plane, how does the kube-scheduler ensure only one instance is active at a time?

Accepted Answer

Leader election using a lease object

Answer

Round-robin DNS

Answer

etcd distributed lock

Answer

External load balancer sticky sessions

Question 4

What does the kubelet use to authenticate to the kube-apiserver in a kubeadm cluster?

Accepted Answer

A client TLS certificate in /var/lib/kubelet/pki

Answer

A static password file

Answer

A service account token

Answer

HTTP Basic Auth

Question 5

Which ConfigMap in the kube-system namespace stores the kubeadm cluster configuration?

Accepted Answer

kubeadm-config

Answer

cluster-config

Answer

kube-config

Answer

kubeadm-cluster

Question 6

What is the role of the Node Authorizer in Kubernetes?

Accepted Answer

Authorizes API calls made by kubelet based on the node's identity

Answer

Grants cluster-admin privileges to all nodes

Answer

Validates node registration certificates

Answer

Routes traffic between nodes

Question 7

Which kubeadm phase generates the kubeconfig files for cluster administrators?

Accepted Answer

kubeadm init phase kubeconfig

Answer

kubeadm init phase certs

Answer

kubeadm init phase etcd

Answer

kubeadm init phase upload-config