CKAD Configuration and Secrets 3

Question 1

How do you reference a specific key from a ConfigMap as an environment variable named 'DB_HOST' in a container?

Accepted Answer

env: [{name: DB_HOST, valueFrom: {configMapKeyRef: {name: mycm, key: db_host}}}]

Answer

envFrom: [{configMapRef: {name: mycm, key: db_host, as: DB_HOST}}]

Answer

env: [{name: DB_HOST, configMap: {name: mycm, key: db_host}}]

Answer

envFrom: [{name: DB_HOST, configMapKeyRef: {name: mycm, key: db_host}}]

Question 2

Which 'kubectl create secret' subcommand creates a TLS secret from a certificate and key file?

Accepted Answer

kubectl create secret tls my-tls --cert=tls.crt --key=tls.key

Answer

kubectl create secret generic my-tls --from-file=tls.crt --from-file=tls.key

Answer

kubectl create secret ssl my-tls --cert=tls.crt --key=tls.key

Answer

kubectl create secret tls my-tls --from-file=tls.crt,tls.key

Question 3

What is the purpose of 'ResourceQuota' in a Kubernetes namespace?

Accepted Answer

Limits total resource consumption and object counts within a namespace

Answer

Sets default resource requests for pods

Answer

Throttles individual container CPU usage

Answer

Provides horizontal auto-scaling based on resource usage

Question 4

Which security context field grants a container specific Linux capabilities without running as root?

Accepted Answer

securityContext.capabilities.add

Answer

securityContext.privileged

Answer

securityContext.allowPrivilegeEscalation

Answer

securityContext.runAsUser

Question 5

How do you update a ConfigMap value and automatically reflect it in a pod using a mounted volume?

Accepted Answer

The mounted ConfigMap volume updates automatically after a short sync period

Answer

Restart the pod manually

Answer

Delete and recreate the pod

Answer

Trigger a rolling update on the deployment

Question 6

What does 'kubectl create configmap my-config --from-file=config.properties' do?

Accepted Answer

Creates a ConfigMap with the filename as the key and file contents as the value

Answer

Creates a ConfigMap parsing each line as a key-value pair

Answer

Creates a ConfigMap with a single key 'config' containing the file contents

Answer

Fails because only --from-literal is supported