Orchestration CV0-004 Practice Questions (Page 7)

Questions 31–33

1. 31application · medium

   A company runs a containerized application on a Kubernetes cluster. The operations team needs to collect and search logs from all containers, correlate them with metrics like CPU and memory usage, and set up alerts when error rates exceed a threshold. Which combination of tools should they deploy?

   • AA ConfigMap that stores log files and a CronJob that emails them to the operations team daily.
   • BPrometheus for metrics and Grafana for dashboards and alerts, plus a log aggregator like Loki or ELK for logs.
   • CKubernetes Dashboard for viewing pod status and kubectl logs for individual containers.
   • DAn Ingress controller that logs all HTTP requests and a NetworkPolicy to restrict access to the logs.
   Reveal Solution Discussion Select an answer first
2. 32expert · hard

   A company runs a multi-tenant Kubernetes cluster. Each tenant's applications run in a separate namespace. The security team wants to ensure that pods in different namespaces cannot communicate with each other, while pods within the same namespace can communicate freely. What is the most effective way to achieve this?

   • ACreate a NetworkPolicy in each namespace that allows all ingress and egress traffic from pods in the same namespace and denies traffic from other namespaces.
   • BAssign each tenant a different node and use nodeSelectors to schedule their pods on separate nodes.
   • CUse a Service of type ClusterIP in each namespace and rely on the default deny-all behavior of Kubernetes.
   • DConfigure a ResourceQuota for each namespace to limit the number of pods and services.
   Reveal Solution Discussion Select an answer first
3. 33foundation · easy

   In Kubernetes, which object is designed to securely store sensitive information such as passwords and API keys?

   • ASecret
   • BPod
   • CServiceAccount
   • DConfigMap
   Reveal Solution Discussion Select an answer first