CKAD Configuration and Secrets 2

Question 1

Which field in a container spec sets the CPU resource request?

Accepted Answer

resources.requests.cpu

Answer

resources.limits.cpu

Answer

resources.cpu.request

Answer

spec.cpu.min

Question 2

A pod has CPU limit of '500m'. What does '500m' represent?

Accepted Answer

0.5 CPU cores (500 millicores)

Answer

500 megabytes of CPU

Answer

500 MHz of CPU frequency

Answer

5 CPU cores

Question 3

What happens to a container that exceeds its memory limit in Kubernetes?

Accepted Answer

It is OOMKilled and restarted

Answer

It is throttled to the limit

Answer

It receives an eviction warning

Answer

Nothing — limits are soft caps

Question 4

Which Kubernetes resource type sets default resource requests and limits for all containers in a namespace?

Accepted Answer

LimitRange

Answer

ResourceQuota

Answer

PodDisruptionBudget

Answer

PriorityClass

Question 5

A container spec has 'securityContext.runAsNonRoot: true'. What does this enforce?

Accepted Answer

The container runs with UID 0 forbidden

Answer

The container cannot write to the filesystem

Answer

The container has no network access

Answer

The container runs in a separate namespace

Question 6

What does 'securityContext.readOnlyRootFilesystem: true' do to a container?

Accepted Answer

Mounts the container's root filesystem as read-only

Answer

Makes the container image read-only for pulling

Answer

Prevents the container from reading secrets

Answer

Prevents changes to the container spec