CKAD Configuration and Secrets 2

Question 1

Which field in a container spec sets the CPU resource request?

Accepted Answer

resources.requests.cpu

Answer

'resources.requests.cpu' defines the minimum CPU the scheduler guarantees for the container.

Question 2

A pod has CPU limit of '500m'. What does '500m' represent?

Accepted Answer

0.5 CPU cores (500 millicores)

Answer

In Kubernetes, 'm' stands for millicores; 500m equals 0.5 CPU cores.

Question 3

What happens to a container that exceeds its memory limit in Kubernetes?

Accepted Answer

It is OOMKilled and restarted

Answer

When a container exceeds its memory limit, the Linux kernel's OOM killer terminates it, and Kubernetes restarts it per the restart policy.

Question 4

Which Kubernetes resource type sets default resource requests and limits for all containers in a namespace?

Accepted Answer

LimitRange

Answer

A LimitRange enforces default and maximum resource requests/limits for pods and containers in a namespace.

Question 5

A container spec has 'securityContext.runAsNonRoot: true'. What does this enforce?

Accepted Answer

The container runs with UID 0 forbidden

Answer

'runAsNonRoot: true' causes Kubernetes to reject the container if its image runs as root (UID 0).

CKAD - Certified Kubernetes Application Developer Practice Test