Given the following Pod spec snippet, what will be the value of the first argument to the container? ```yaml spec: containers: - name: app image: busybox command: ["echo"] args: ["$(APP_COLOR)"] env: - name: APP_COLOR valueFrom: configMapKeyRef: name: app-config key: color ```

The literal string '$(APP_COLOR)'.

The value of the 'APP_COLOR' key from the ConfigMap.

The value of the 'color' key from the 'app-config' ConfigMap.

Which kubectl command creates a Secret for private registry authentication?

kubectl create secret generic regcred --from-literal=username=user --from-literal=password=pass

kubectl create secret docker-registry regcred --docker-server=myregistry.io --docker-username=user --docker-password=pass

kubectl create secret registry regcred --docker-server=myregistry.io --docker-username=user --docker-password=pass

kubectl create secret docker-registry regcred --from-file=.dockerconfigjson

How do you use a docker-registry Secret in a Pod to pull images from a private registry?

Set the env field to include the Secret's credentials.

Set the imagePullPolicy field to 'Always' and reference the Secret in the image name.

Mount the Secret as a volume and set the container's command to use it.

Set the imagePullSecrets field in the Pod spec to reference the Secret.

What is the effect of setting the 'immutable' field to true on a ConfigMap?

The ConfigMap cannot be modified, but it can be deleted.

The ConfigMap can be modified only by cluster admins.

The ConfigMap's data is encrypted at rest.

The ConfigMap cannot be modified or deleted.

Which of the following is a benefit of marking a Secret as immutable?

It prevents unauthorized users from reading the Secret.

It improves performance by avoiding watch operations on the Secret.

It ensures the Secret is never deleted.

It automatically rotates the Secret's data.

Certified Kubernetes Administrator (CKA)

Domain 3Objective 2

Use ConfigMaps and Secrets to Configure Applications CKA Practice Questions (Page 2)

Part of the Workloads and Scheduling domain, which accounts for 15% of the CKA exam. Linux Foundation does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 2–2 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

9concepts

15%of the exam

Questions 6–10

6foundation · easy
Given the following Pod spec snippet, what will be the value of the first argument to the container? ```yaml spec: containers: - name: app image: busybox command: ["echo"] args: ["$(APP_COLOR)"] env: - name: APP_COLOR valueFrom: configMapKeyRef: name: app-config key: color ```
Select an answer first
7foundation · easy
Which kubectl command creates a Secret for private registry authentication?
Select an answer first
8foundation · easy
How do you use a docker-registry Secret in a Pod to pull images from a private registry?
Select an answer first
9foundation · easy
What is the effect of setting the 'immutable' field to true on a ConfigMap?
Select an answer first
10foundation · easy
Which of the following is a benefit of marking a Secret as immutable?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CKA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Foundation. “CKA” is a trademark of its owner, used for identification only.