Understand and Use CoreDNS CKA Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   An organization runs a hybrid workload where some applications need to resolve internal corporate hostnames (e.g., db.internal.corp) that are served by an on-premises DNS server at 10.0.0.53. The cluster's CoreDNS is currently configured to forward all non-cluster queries to 8.8.8.8. What is the recommended way to configure CoreDNS to resolve these corporate hostnames?

   • AAdd a 'rewrite' plugin rule to rewrite 'internal.corp' queries to the on-premises server.
   • BAdd a new 'forward' plugin block for the 'internal.corp' domain pointing to 10.0.0.53.
   • CModify the 'forward' plugin to use 10.0.0.53 as the primary upstream and 8.8.8.8 as a fallback.
   • DCreate a new ConfigMap with a 'hosts' plugin entry mapping the corporate hostnames to their IPs.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which command would you use to view the logs of a CoreDNS Pod to troubleshoot DNS resolution failures?

   • Akubectl describe pod <coredns-pod>
   • Bjournalctl -u coredns
   • Ckubectl logs <coredns-pod> -n kube-system
   • Dkubectl exec <coredns-pod> -- cat /var/log/coredns.log
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A security team requires that all DNS queries from pods be logged for audit purposes. The cluster uses CoreDNS. What is the simplest way to enable query logging without disrupting service?

   • ADeploy a DaemonSet that runs tcpdump on each node to capture port 53 traffic.
   • BAdd the 'log' plugin to the Corefile in the CoreDNS ConfigMap.
   • CEnable audit logging in the kube-apiserver.
   • DConfigure the 'forward' plugin to send queries to a logging DNS server.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A developer reports that a pod in the 'backend' namespace cannot reach a service named 'api' that is deployed in the 'frontend' namespace. The service is exposed on port 8080. The developer is using the short name 'api:8080' in their connection string. Which fully qualified domain name should the developer use to ensure the connection works reliably?

   • Aapi.frontend.svc.cluster.local:8080
   • Bfrontend.api.svc.cluster.local:8080
   • Capi.svc.frontend.cluster.local:8080
   • Dapi.backend.svc.cluster.local:8080
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A developer is confused about why a pod can resolve a service name 'web' in the same namespace using just 'web', but needs the full name 'web.default.svc.cluster.local' when accessing it from a different namespace. What is the reason for this behavior?

   • AThe kubelet configures the pod's DNS policy to only allow same-namespace resolution.
   • BCoreDNS only resolves short names for services in the same namespace.
   • CThe pod's /etc/resolv.conf includes the namespace as a search domain.
   • DThe CoreDNS 'kubernetes' plugin is configured to only answer queries for the pod's namespace.
   Reveal Solution Discussion Select an answer first