A user 'carol' reports that she can get pods in the 'prod' namespace but cannot list them. She has a RoleBinding in 'prod' that binds her to a Role with verbs ['get'] on pods. What is the most likely reason she cannot list pods?

The RoleBinding is in the wrong namespace.

The Role only grants the 'get' verb, which allows retrieving a single pod by name, but not listing all pods. The 'list' verb is required for listing.

The Role does not include the 'watch' verb.

How does a pod authenticate to the Kubernetes API server when it needs to make API calls?

Using the pod's IP address as credentials

Using a username and password stored in a ConfigMap

Using the node's kubeconfig file

Using a ServiceAccount token mounted into the pod

Which of the following subjects can be referenced in a RoleBinding or ClusterRoleBinding?

Users, Groups, and ServiceAccounts

What is the key difference between a Role and a ClusterRole in Kubernetes RBAC?

A Role is for users, while a ClusterRole is for service accounts

A Role grants read-only access, while a ClusterRole grants write access

A Role is namespaced, while a ClusterRole is cluster-wide

A Role is deprecated, while a ClusterRole is the current standard

Certified Kubernetes Administrator (CKA)

Domain 4Objective 1

Manage Role Based Access Control (RBAC) CKA Practice Questions (Page 2)

Part of the Cluster Architecture, Installation and Configuration domain, which accounts for 25% of the CKA exam. Linux Foundation does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 2–3 from this objective — we provide 12 practice questions to prepare you well beyond it. (estimate)

12questions here

3free pages

6concepts

25%of the exam

Questions 6–10

6expert · medium
A user 'carol' reports that she can get pods in the 'prod' namespace but cannot list them. She has a RoleBinding in 'prod' that binds her to a Role with verbs ['get'] on pods. What is the most likely reason she cannot list pods?
Select an answer first
7foundation · easy
Which RBAC object would you use to grant a user permission to view nodes (a cluster-scoped resource) across the entire cluster?
Select an answer first
8foundation · easy
How does a pod authenticate to the Kubernetes API server when it needs to make API calls?
Select an answer first
9foundation · easy
Which of the following subjects can be referenced in a RoleBinding or ClusterRoleBinding?
Select an answer first
10foundation · easy
What is the key difference between a Role and a ClusterRole in Kubernetes RBAC?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CKA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Foundation. “CKA” is a trademark of its owner, used for identification only.