CKAD CKAD 4

Question 1

A container needs read-only access to a Secret value as a file. Which volume type should be used?

Accepted Answer

secret

Answer

A secret volume mounts Secret data as files in the container's filesystem, and can be made read-only.

Question 2

Which kubectl command lets you test a Pod manifest for validity without creating the resource?

Accepted Answer

kubectl apply -f pod.yaml --dry-run=client

Answer

kubectl apply --dry-run=client processes the manifest locally and reports errors without sending a request to the API server.

Question 3

A CronJob is set to schedule '0 * * * *'. How often will it run?

Accepted Answer

Every hour at minute 0

Answer

The cron expression '0 * * * *' means 'at minute 0 of every hour', so the job runs once per hour.

Question 4

What does setting 'runAsNonRoot: true' in a Pod's securityContext enforce?

Accepted Answer

Kubernetes rejects the Pod if the container would run as UID 0

Answer

runAsNonRoot: true causes the kubelet to reject the Pod at startup if the container process would run as root (UID 0).

Question 5

Which command generates a Pod manifest for an nginx container without creating it?

Accepted Answer

kubectl run nginx --image=nginx --dry-run=client -o yaml

Answer

kubectl run with --dry-run=client -o yaml prints the generated manifest without creating the Pod in the cluster.

CKAD - Certified Kubernetes Application Developer Practice Test