CKA Credential Overview 2

Question 1

Which Kubernetes resource type stores TLS certificates and private keys used by Ingress controllers?

Accepted Answer

Secret of type kubernetes.io/tls

Answer

A Secret of type kubernetes.io/tls stores a TLS certificate (tls.crt) and private key (tls.pem) for use by Ingress controllers.

Question 2

What is the default expiration duration for a Kubernetes ServiceAccount token created via the TokenRequest API?

Accepted Answer

1 hour

Answer

The default expiration for tokens issued by the TokenRequest API is 1 hour, though it can be configured.

Question 3

Which field in a kubeconfig file specifies the cluster's API server address?

Accepted Answer

server

Answer

The 'server' field under a cluster entry in kubeconfig specifies the URL of the Kubernetes API server.

Question 4

How does Kubernetes authenticate a request when a client presents an X.509 certificate?

Accepted Answer

It validates the certificate against the cluster CA and uses the CN as the username

Answer

Kubernetes validates the client certificate against the cluster CA and extracts the Common Name (CN) as the username and Organization (O) as groups.

Question 5

Which command creates a CertificateSigningRequest (CSR) resource in Kubernetes?

Accepted Answer

kubectl apply -f csr.yaml

Answer

You create a CertificateSigningRequest by applying a YAML manifest with kind: CertificateSigningRequest using kubectl apply.

(CKA) Certified Kubernetes Associate Practice Test