Understand Extension Interfaces (CNI, CSI, CRI, Etc.) CKA Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A platform team is designing a multi-tenant cluster and must ensure that: (1) tenants cannot sniff each other's traffic, (2) each tenant's storage is isolated, and (3) the runtime can be swapped without recompiling the kubelet. Which combination of extension interfaces addresses all three requirements?

   • ACSI with snapshots, CNI with IPAM, and a runtime with a RuntimeClass
   • BCRI with multiple runtimes, CNI with a single network, and in-tree storage plugins
   • CCNI with network policies, CSI with per-tenant storage classes, and CRI-compliant runtime
   • DCNI with a flat network, CSI with a shared storage class, and a single runtime
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which Kubernetes API object is used to request storage that a CSI driver can provision?

   • AStorageClass
   • BDaemonSet
   • CConfigMap
   • DPersistentVolumeClaim
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A pod is stuck in ContainerCreating. The kubelet logs show a CNI error: 'failed to find plugin'. Which of the following is the most likely cause?

   • AThe container runtime is not CRI-compliant
   • BThe CSI driver is not installed
   • CThe pod's network namespace is not created
   • DThe CNI plugin binary is not installed in the kubelet's cni-bin-dir
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A cluster runs a mix of workloads: standard containers and a few that require hardware virtualization for isolation. The team wants to use Kata Containers for the isolated workloads while keeping containerd for the rest. What is the correct configuration?

   • AConfigure containerd to support the 'kata' runtime handler and create a RuntimeClass that references it
   • BDeploy Kata Containers as a DaemonSet and use a sidecar container
   • CReplace containerd with Kata Containers as the default runtime
   • DUse a nodeSelector to schedule isolated workloads on nodes with Kata Containers installed
   Reveal Solution Discussion Select an answer first
6. 5expert · hard · select all that apply

   A platform team is evaluating the benefits of using extension interfaces (CNI, CSI, CRI) in their Kubernetes cluster. Which of the following are genuine benefits of this architecture? (Select all that apply.)

   • AStorage drivers can be upgraded independently of the Kubernetes release cycle
   • BThe kubelet can support multiple container runtimes simultaneously without recompilation
   • CNetwork policies are enforced by the API server
   • DVendors can implement their own plugins without modifying Kubernetes core code
   • EThe CNI plugin can be swapped without changing the pod IP address scheme
   Check answers Discussion Select an answer first