CKA Cluster Architecture, Installation, and Configuration 4

Question 1

What is the function of the etcd --initial-cluster-state flag when set to 'existing'?

Accepted Answer

Adds a new member to an already running etcd cluster

Answer

Creates a brand-new etcd cluster

Answer

Restores etcd from a snapshot

Answer

Forces etcd leader election

Question 2

Where does kubeadm store the root CA certificate and key used to sign all cluster certificates?

Accepted Answer

/etc/kubernetes/pki/

Answer

/etc/ssl/kubernetes/

Answer

/var/lib/kubelet/pki/

Answer

/root/.kube/pki/

Question 3

What happens to existing Pods on a node when you run 'kubectl cordon <node>'?

Accepted Answer

They continue running but no new Pods will be scheduled

Answer

They are immediately evicted

Answer

They are rescheduled to other nodes

Answer

They are deleted and recreated on other nodes

Question 4

Which etcd command creates a point-in-time snapshot backup of cluster data?

Accepted Answer

etcdctl snapshot save

Answer

etcdctl backup

Answer

etcdctl export

Answer

etcdctl dump

Question 5

In Kubernetes RBAC, what is the difference between a Role and a ClusterRole?

Accepted Answer

Roles are namespaced; ClusterRoles are cluster-scoped

Answer

Roles support more verbs than ClusterRoles

Answer

ClusterRoles cannot be bound with RoleBindings

Answer

Roles can include non-resource URLs; ClusterRoles cannot

Question 6

What is the purpose of the --encryption-provider-config flag on the kube-apiserver?

Accepted Answer

Enables encryption of secrets and other resources at rest in etcd

Answer

Configures TLS for API server endpoints

Answer

Sets up network encryption between nodes

Answer

Configures OIDC provider for authentication

Question 7

After upgrading a worker node's kubeadm and kubelet packages, which command applies the node configuration upgrade?

Accepted Answer

kubeadm upgrade node

Answer

kubeadm upgrade apply

Answer

kubeadm node upgrade

Answer

kubeadm worker upgrade