CKAD Configuration and Secrets

Question 1

How do you create a ConfigMap named 'app-config' from a literal key-value pair 'APP_ENV=production'?

Accepted Answer

kubectl create configmap app-config --from-literal=APP_ENV=production

Answer

kubectl apply configmap app-config --value=APP_ENV=production

Answer

kubectl set configmap app-config APP_ENV=production

Answer

kubectl create configmap app-config --key=APP_ENV --value=production

Question 2

Which Pod spec field injects all keys of a ConfigMap as environment variables?

Accepted Answer

envFrom.configMapRef

Answer

env.valueFrom.configMapKeyRef

Answer

volumeMounts.configMap

Answer

env.configMapRef

Question 3

What is the default encoding used for Secret values in Kubernetes?

Accepted Answer

Base64 encoded

Answer

UTF-8 plaintext

Answer

AES-256 encrypted

Answer

SHA-256 hashed

Question 4

Which command creates a Secret named 'db-secret' with username and password from literal values?

Accepted Answer

kubectl create secret generic db-secret --from-literal=username=admin --from-literal=password=pass123

Answer

kubectl create secret tls db-secret --username=admin --password=pass123

Answer

kubectl apply secret db-secret --data username=admin password=pass123

Answer

kubectl set secret db-secret username=admin password=pass123

Question 5

How do you mount a Secret as a volume so each key becomes a file in the pod?

Accepted Answer

Use 'volumes.secret.secretName' and mount it with 'volumeMounts'

Answer

Use 'envFrom.secretRef' in the container spec

Answer

Use 'env.valueFrom.secretKeyRef' for every key

Answer

Use 'secretMount' in the container spec

Question 6

What type of Secret should you use to store Docker registry credentials for image pulling?

Accepted Answer

docker-registry

Answer

generic

Answer

tls

Answer

opaque