A developer reports that `kubectl get pods` returns an error: 'Unable to connect to the server: dial tcp 10.0.0.10:6443: connect: connection refused'. The control plane node is reachable via SSH. Which command sequence should you run first to identify the failing component?

`kubectl get events --all-namespaces`

`etcdctl endpoint health --endpoints=https://127.0.0.1:2379`

`systemctl status kubelet` and `journalctl -u kubelet`

`systemctl status kube-apiserver` and `journalctl -u kube-apiserver`

A worker node is reporting NotReady, and the kubelet is suspected to be failing. Which command would you use to view the kubelet logs on that node?

kubectl logs kubelet -n kube-system

A worker node is `NotReady`. `journalctl -u kubelet` shows: 'failed to initialize top level QOS containers: failed to create qos cgroup'. The node has been running for months. What is the most likely cause?

The kubelet's kubeconfig is invalid.

The kubelet's cgroup driver does not match the container runtime's cgroup driver.

The CNI plugin is not installed.

You suspect the kube-scheduler is not placing pods correctly. Which command provides the most direct evidence of the scheduler's decisions and errors?

`kubectl get events --all-namespaces`

`kubectl get pod pod-name -o yaml`

`kubectl logs -n kube-system kube-scheduler-control-plane`

`kubectl describe pod pod-name`

A pod is failing to start, and you need to see the container's standard error output. Which kubectl command would you use?

kubectl exec -- cat /var/log/app.log

Certified Kubernetes Administrator (CKA)

Domain 2Objective 2

Troubleshoot Cluster Components CKA Practice Questions (Page 4)

Part of the Troubleshooting domain, which accounts for 30% of the CKA exam. Linux Foundation does not publish an official question count, but from its 120-minute exam (~50–80 total, ~15–24 in this domain), expect 3–5 from this objective — we provide 23 practice questions to prepare you well beyond it. (estimate)

23questions here

5free pages

6concepts

30%of the exam

Questions 16–20

16application · medium
A developer reports that `kubectl get pods` returns an error: 'Unable to connect to the server: dial tcp 10.0.0.10:6443: connect: connection refused'. The control plane node is reachable via SSH. Which command sequence should you run first to identify the failing component?
Select an answer first
17foundation · easy
A worker node is reporting NotReady, and the kubelet is suspected to be failing. Which command would you use to view the kubelet logs on that node?
Select an answer first
18expert · hard
A worker node is `NotReady`. `journalctl -u kubelet` shows: 'failed to initialize top level QOS containers: failed to create qos cgroup'. The node has been running for months. What is the most likely cause?
Select an answer first
19application · medium
You suspect the kube-scheduler is not placing pods correctly. Which command provides the most direct evidence of the scheduler's decisions and errors?
Select an answer first
20foundation · easy
A pod is failing to start, and you need to see the container's standard error output. Which kubectl command would you use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CKA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Foundation. “CKA” is a trademark of its owner, used for identification only.