CKAD Certified CKAD 4

Question 1

Which field in a container spec defines the command that overrides the Docker ENTRYPOINT?

Accepted Answer

spec.containers[].command

Answer

The command field overrides the container image's ENTRYPOINT, while args overrides the CMD.

Question 2

A ConfigMap stores a multi-line config file. Which volumeMount approach injects it as a file inside the container?

Accepted Answer

volumes with configMap and volumeMounts

Answer

Mounting a ConfigMap as a volume projects each key as a file, allowing the container to read it from the filesystem.

Question 3

What is the security risk of setting allowPrivilegeEscalation: true in a securityContext?

Accepted Answer

A process can gain more privileges than its parent via setuid binaries

Answer

allowPrivilegeEscalation: true permits a child process to obtain higher privileges than its parent, enabling setuid exploits.

Question 4

You want a Job to retry failed pods up to 4 times before marking the Job as failed. Which field controls this?

Accepted Answer

spec.backoffLimit

Answer

spec.backoffLimit specifies how many times a Job will retry by creating new pods before the Job is considered failed.

Question 5

A CronJob's schedule '*/15 * * * *' means the job runs at what frequency?

Accepted Answer

Every 15 minutes

Answer

The cron expression */15 in the minutes field triggers the job every 15 minutes throughout the day.

CKAD - Certified Kubernetes Application Developer Practice Test