CKAD Certified CKAD 3

Question 1

You want to expose a Deployment internally within the cluster on port 80. Which Service type should you use?

Accepted Answer

ClusterIP

Answer

ClusterIP creates a virtual IP reachable only within the cluster, suitable for internal service-to-service communication.

Question 2

Which Ingress annotation is commonly used to rewrite the request path before forwarding to a backend?

Accepted Answer

nginx.ingress.kubernetes.io/rewrite-target

Answer

The rewrite-target annotation tells the NGINX ingress controller to rewrite the URI before proxying to the upstream service.

Question 3

A NetworkPolicy selects pods with podSelector: {} and has no ingress rules. What is the effect?

Accepted Answer

All ingress traffic to selected pods is denied

Answer

An empty ingress array with no rules blocks all inbound traffic to pods matched by the selector.

Question 4

Which field in a Service spec routes traffic to pods based on their labels?

Accepted Answer

spec.selector

Answer

spec.selector in a Service matches pods whose labels equal the selector, determining which pods receive traffic.

Question 5

What is the purpose of a headless Service (clusterIP: None) in Kubernetes?

Accepted Answer

To disable load balancing and expose each pod IP via DNS directly

Answer

A headless Service returns individual pod IPs in DNS responses instead of a single virtual ClusterIP, enabling direct pod addressing.

CKAD - Certified Kubernetes Application Developer Practice Test