CKAD Certified CKAD 5

Question 1

Which kubectl command updates the image of a container named 'web' in a Deployment named 'frontend' to 'nginx:1.25'?

Accepted Answer

kubectl set image deployment/frontend web=nginx:1.25

Answer

kubectl set image updates a specific container's image in a Deployment, triggering a rolling update.

Question 2

A Pod needs read access to a Secret without exposing it as an environment variable. What is the preferred approach?

Accepted Answer

Mount the Secret as a volume and read from the file

Answer

Mounting Secrets as files reduces exposure versus env vars, which can be leaked via process inspection or logging.

Question 3

Which command shows the rollout history of a Deployment and lists previous revisions?

Accepted Answer

kubectl rollout history deployment/myapp

Answer

kubectl rollout history shows all tracked revisions; add --revision=N for details of a specific revision.

Question 4

A pod spec sets resource requests but no limits. What happens if the node becomes memory-constrained?

Accepted Answer

The container is OOM-killed if it consumes more than the request

Answer

Without limits, containers can use memory beyond their request; when the node is under pressure, these pods (BestEffort or Burstable QoS) are evicted first.

Question 5

You need a persistent volume that survives pod deletion and can be reused. Which reclaimPolicy achieves this?

Accepted Answer

Retain

Answer

Retain keeps the PersistentVolume and its data after the PVC is deleted, requiring manual cleanup before rebinding.

CKAD - Certified Kubernetes Application Developer Practice Test

CKAD - Certified Kubernetes Application Developer Practice Test

CKAD Certified CKAD 5