Use ConfigMaps and Secrets to Configure Applications CKA Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which field is used to inject a specific key from a Secret as an environment variable in a Pod?

   • Aenv.valueFrom.configMapKeyRef
   • Benv.secretRef
   • Cenv.valueFrom.secretKeyRef
   • DenvFrom.secretRef
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which YAML snippet correctly injects the value of the 'password' key from a Secret named 'db-secret' into the environment variable 'DB_PASSWORD'?

   • AenvFrom: - secretRef: name: db-secret key: password
   • Benv: - name: DB_PASSWORD value: db-secret.password
   • Cenv: - name: DB_PASSWORD valueFrom: secretKeyRef: name: db-secret key: password
   • Denv: - name: DB_PASSWORD valueFrom: secretRef: name: db-secret key: password
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   When a ConfigMap is mounted as a volume in a Pod, what happens when the ConfigMap is updated?

   • AThe files are never updated; you must recreate the Pod.
   • BThe files are updated only after the container restarts.
   • CThe files are updated immediately without any delay.
   • DThe files in the volume are automatically updated after a short delay (kubelet sync period).
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A team is deploying a web application that needs a database connection string and a cache endpoint. The values are not sensitive and are stored in a ConfigMap named 'app-config'. The application container expects these values as environment variables DB_URL and CACHE_URL. Additionally, the container command needs to reference the cache endpoint as a command-line argument. Which approach correctly injects the ConfigMap data as environment variables and as a command-line argument?

   • ACreate a new ConfigMap with the command-line argument as a key and use configMapKeyRef in args.
   • BUse configMapKeyRef in env to set DB_URL and CACHE_URL, then use $(CACHE_URL) in the command.
   • CMount the ConfigMap as a volume and read the files in the command using $(cat /etc/config/cache).
   • DUse envFrom to import all ConfigMap keys, then reference $(DB_URL) in the command.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A Secret named 'db-creds' is mounted as a volume. The application expects the file 'password' to have permissions 0600. The Secret is immutable. Which configuration ensures the correct permissions?

   • AUse a ConfigMap instead of a Secret because it supports defaultMode.
   • BSet items with mode: 0600 for the 'password' key and immutable: true in the Secret.
   • CSet defaultMode: 0600 in the volume and immutable: true in the Secret.
   • DSet defaultMode: 0600 in the volume and do not set immutable.
   Reveal Solution Discussion Select an answer first