A company wants to terminate TLS for 'secure.example.com' using a certificate from a public CA. They have stored the certificate and key in a secret named 'secure-tls' in the 'default' namespace. They have an NGINX Ingress controller. Which additional configuration is required for the Ingress to use this secret?

Create a second secret with the CA bundle and reference it in the Ingress.

Add a 'spec.tls' block with hosts and secretName, and a rule for the same host.

Add an annotation 'nginx.ingress.kubernetes.io/ssl-certificate: secure-tls'.

Set the 'spec.tls' block with secretName only, without hosts.

What is the purpose of annotations on an Ingress resource?

To store the TLS certificate for the Ingress

To provide additional configuration to the Ingress controller

To specify the backend Service for the Ingress

To define the routing rules for the Ingress

What is the purpose of the `spec.defaultBackend` field in an Ingress resource?

To specify the backend Service for the first rule in the Ingress

To define a backend Service for requests that do not match any rule

To define the Service that exposes the Ingress controller

To specify the backend Service for TLS termination

How do you configure an Ingress resource to route traffic based on the hostname in the request?

By setting the `ingressClassName` field

By setting the `spec.tls[].hosts` field

By using the `metadata.name` field

By specifying a `host` field in each rule under `spec.rules`

Certified Kubernetes Administrator (CKA)

Domain 5Objective 5

Know How to Use Ingress Controllers and Ingress Resources CKA Practice Questions (Page 2)

Part of the Servicing and Networking domain, which accounts for 20% of the CKA exam. Linux Foundation does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 2–3 from this objective — we provide 18 practice questions to prepare you well beyond it. (estimate)

18questions here

4free pages

10concepts

20%of the exam

Questions 6–10

6application · medium
A company wants to terminate TLS for 'secure.example.com' using a certificate from a public CA. They have stored the certificate and key in a secret named 'secure-tls' in the 'default' namespace. They have an NGINX Ingress controller. Which additional configuration is required for the Ingress to use this secret?
Select an answer first
7foundation · easy
What is the purpose of annotations on an Ingress resource?
Select an answer first
8foundation · easy
What is the purpose of the `spec.defaultBackend` field in an Ingress resource?
Select an answer first
9foundation · easy
What Kubernetes resource defines the controller that an `ingressClassName` refers to?
Select an answer first
10foundation · easy
How do you configure an Ingress resource to route traffic based on the hostname in the request?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CKA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Foundation. “CKA” is a trademark of its owner, used for identification only.

Know How to Use Ingress Controllers and Ingress Resources CKA Practice Questions (Page 2)

Questions 6–10

What is the purpose of annotations on an Ingress resource?

What is the purpose of the `spec.defaultBackend` field in an Ingress resource?

What Kubernetes resource defines the controller that an `ingressClassName` refers to?

How do you configure an Ingress resource to route traffic based on the hostname in the request?

Keep studying — Servicing and Networking