Cloud Integration & Deployment Flashcards

What is the primary purpose of a Kubernetes PersistentVolumeClaim (PVC)?

Answer: To request specific storage resources that a pod can use

A PVC is a user's request for storage that Kubernetes binds to an available PersistentVolume matching the specified size and access mode.

Which systemd unit type is best suited for running a containerized application that should restart automatically on failure?

Answer: simple

A 'simple' systemd service type is appropriate for long-running processes like containers, and combined with 'Restart=always' ensures automatic restarts on failure.

In a GitLab CI/CD pipeline, what does the 'only: - main' directive control?

Answer: The job runs only when changes are pushed to the main branch

The 'only: - main' directive restricts the job to execute only when commits are pushed to the branch named 'main'.

Which command removes all stopped containers, unused networks, dangling images, and build cache from a Docker host?

Answer: docker system prune

'docker system prune' removes all stopped containers, unused networks, dangling images, and the build cache in a single command.

What is the function of an AWS Security Group in a cloud deployment?

Answer: It acts as a stateful virtual firewall controlling inbound and outbound traffic

An AWS Security Group is a stateful virtual firewall that controls inbound and outbound traffic to EC2 instances based on configurable rules.

Which Kubernetes resource is used to store sensitive data such as passwords, tokens, or TLS certificates?

Answer: Secret

Kubernetes Secrets store sensitive data in base64-encoded form and can be mounted into pods as volumes or exposed as environment variables.

What is the purpose of the 'EXPOSE' instruction in a Dockerfile?

Answer: It documents which ports the container listens on at runtime

The EXPOSE instruction documents the intended network ports, serving as metadata; actual port publishing requires '-p' in the docker run command.