CKA Troubleshooting 2

Question 1

A pod's status shows 'ImagePullBackOff'. What is the most likely cause?

Accepted Answer

The container image cannot be pulled due to a wrong name, tag, or missing credentials

Answer

ImagePullBackOff occurs when Kubernetes cannot pull the container image, typically due to an incorrect image name or tag, or missing imagePullSecret for a private registry.

Question 2

Which command checks the health of etcd cluster members?

Accepted Answer

etcdctl endpoint health --endpoints= --cacert= --cert= --key=

Answer

etcdctl endpoint health with proper TLS certificate flags is the correct way to verify etcd cluster member health and connectivity.

Question 3

A service exists but pods are not receiving traffic. What should you check first?

Accepted Answer

Whether the service's selector labels match the pod's labels

Answer

Services route traffic using label selectors; if the selector doesn't match the pod labels, no endpoints are created and traffic cannot flow to the pods.

Question 4

How do you check the expiration date of the API server certificate on a kubeadm cluster?

Accepted Answer

Both B and C are valid methods

Answer

Both openssl x509 -noout -dates and kubeadm certs check-expiration are valid methods to inspect certificate expiration on a kubeadm-managed cluster.

Question 5

A node is showing 'DiskPressure' condition as True. What does this mean?

Accepted Answer

The node has less available disk space than the kubelet eviction threshold requires

Answer

DiskPressure indicates the node's available disk space has fallen below the kubelet eviction threshold, which can trigger pod evictions to free space.

(CKA) Certified Kubernetes Associate Practice Test

(CKA) Certified Kubernetes Associate Practice Test

CKA Troubleshooting 2