Kubernetes Container Orchestration Cheat Sheet 2026
The 30 highest-yield Kubernetes Container Orchestration facts, distilled from real exam questions. Print it, save it as a PDF, or study it here — free, no sign-up.
60 questions
90 min time limit
75.00% to pass
- Which probe type checks if a container is ready to accept traffic? → Readiness probe
- Which annotation on a Kubernetes resource tells Helm NOT to delete it when the release is uninstalled? → helm.sh/resource-policy: keep
- Which field in a Pod spec allows you to share the host network namespace with the Pod's containers? → spec.hostNetwork: true
- When using Vertical Pod Autoscaler (VPA) in 'Off' mode, what happens? → VPA only provides recommendations without applying them
- What is the relationship between a CRD and a Custom Resource (CR)? → A CRD defines the type schema; a CR is a specific instance created from that schema
- Which Kubernetes resource replaced Endpoints for improved scalability, especially in large clusters? → EndpointSlice
- In a service mesh, what is the purpose of a 'retry policy'? → Re-attempt failed requests a specified number of times before returning an error
- A Pod is stuck in `Pending` state. Which of the following is NOT a likely cause? → The container's liveness probe is failing
- The 'Service Mesh' pattern in Kubernetes offloads which cross-cutting concerns from application code? → mTLS, retries, circuit breaking, and observability at the network layer
- Which field in a Pod spec allows you to run a container as a non-root user? → securityContext.runAsNonRoot
- How can you pre-populate a new PVC with data from an existing PVC without using a snapshot? → Set the dataSource field of the new PVC to reference the existing PVC
- Which field in a PodSpec enables a pod to use a specific PersistentVolumeClaim? → volumes[].persistentVolumeClaim.claimName
- What does the `helm show values` command display? → The default values defined in the chart's values.yaml
- What does the 'volumeBindingMode: WaitForFirstConsumer' setting on a StorageClass accomplish? → Delays PV provisioning until a pod using the PVC is scheduled
- What is the key benefit of evidence-based decision making in Kubernetes Container Orchestration management? → It improves accuracy and reduces bias in decisions
- A Horizontal Pod Autoscaler (HPA) scales based on which metric by default? → CPU utilization
- What role does collaboration play in monitoring and logging for Kubernetes Container Orchestration professionals? → It enhances outcomes through diverse perspectives and shared expertise
- What is a ServiceAccount token's primary purpose in Kubernetes? → Authenticating pods to the Kubernetes API server
- What is a Pod Disruption Budget (PDB) used for? → Ensuring a minimum number of Pods remain available during voluntary disruptions
- Which Ingress path type ensures that only exact URL matches trigger the routing rule? → Exact
- What is the purpose of a Kubernetes NetworkPolicy? → Control ingress and egress traffic between pods
- What is the purpose of the `_helpers.tpl` file in a Helm chart? → It defines reusable template snippets and named templates
- In Kubernetes, how is the 'Leader Election' pattern typically implemented for controllers? → Via a Lease object in the coordination.k8s.io API group
- Which principle is fundamental to good cloud native patterns practice? → Separation of concerns and modularity
- Which Linux capability should be dropped to prevent a container from performing raw packet manipulation? → CAP_NET_RAW
- What role does collaboration play in storage solutions for Kubernetes Container Orchestration professionals? → It enhances outcomes through diverse perspectives and shared expertise
- What happens when a Pod's liveness probe fails repeatedly? → The container is restarted according to the Pod's restart policy
- In Kubernetes, which of the following watches for newly formed pods with no node assigned and selects a node for them to run on? → kube-scheduler
- Which Kubernetes resource is used to store non-sensitive configuration data such as app settings? → ConfigMap
- Which field in a Pod spec controls how many times Kubernetes restarts a failed container before giving up? → spec.restartPolicy
Turn these facts into recall:
Was this helpful?