A pod needs to consume a ConfigMap named 'app-config' with keys 'DB_HOST' and 'DB_PORT' as environment variables. Additionally, the container command needs to use the DB_HOST value. Which pod spec correctly injects these and uses DB_HOST in the command?

Use envFrom to import all keys, then command: ["./app", "--host=$(DB_HOST)"]

Use command: ["./app", "--host=DB_HOST"] without defining the env var.

Mount the ConfigMap as a volume and read the file in the command.

Use env with configMapKeyRef for both variables, then command: ["./app", "--host=$(DB_HOST)"]

A pod needs to consume a Secret named 'api-secret' with key 'token' as an environment variable API_TOKEN. The Secret is immutable. Which pod spec correctly injects the value?

Mount the Secret as a volume and read the file in the container.

Use env with secretKeyRef to set API_TOKEN.

Use a ConfigMap instead of a Secret because it can be made immutable.

Use envFrom to import all keys from the Secret.

A deployment is failing to pull an image from a private registry. The administrator has created a Secret of type docker-registry named 'regcred'. What is the most likely missing configuration in the deployment?

The deployment's pod template does not include imagePullSecrets referencing 'regcred'.

The Secret is not mounted as a volume in the pod.

The imagePullPolicy is set to Always.

The Secret is not injected as an environment variable.

A ConfigMap named 'app-config' is used by multiple deployments. The team wants to prevent accidental changes. They set immutable: true. Later, they need to update a configuration value. What is the correct procedure?

Delete the ConfigMap and recreate it with the same name and updated data.

Create a new ConfigMap with the updated value and update all deployments to reference the new ConfigMap.

Use kubectl rollout restart to force the ConfigMap to update.

Edit the ConfigMap in place; immutability only prevents deletion.

A ConfigMap is mounted as a volume in a pod. The ConfigMap is not immutable. The team updates the ConfigMap. They expect the mounted file to update automatically. However, the file does not update. What is the most likely cause?

The pod must be restarted to pick up ConfigMap changes.

The volume is using subPath, which does not receive updates.

The ConfigMap was created with immutable: true.

The kubelet sync period has not elapsed yet; updates are eventually consistent.

Certified Kubernetes Administrator (CKA)

Domain 3Objective 2

Use ConfigMaps and Secrets to Configure Applications CKA Practice Questions (Page 5)

Part of the Workloads and Scheduling domain, which accounts for 15% of the CKA exam. Linux Foundation does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 2–2 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

9concepts

15%of the exam

9 Concepts in This Objective

Create ConfigMaps
Create Secrets
Consume ConfigMaps as environment variables
Consume Secrets as environment variables
Consume ConfigMaps as volumes
Consume Secrets as volumes
Use ConfigMaps for command-line arguments
Use Secrets for private registry authentication
Understand ConfigMap and Secret immutability

Questions 21–25

21application · medium
A pod needs to consume a ConfigMap named 'app-config' with keys 'DB_HOST' and 'DB_PORT' as environment variables. Additionally, the container command needs to use the DB_HOST value. Which pod spec correctly injects these and uses DB_HOST in the command?
Select an answer first
22application · easy
A pod needs to consume a Secret named 'api-secret' with key 'token' as an environment variable API_TOKEN. The Secret is immutable. Which pod spec correctly injects the value?
Select an answer first
23application · medium
A deployment is failing to pull an image from a private registry. The administrator has created a Secret of type docker-registry named 'regcred'. What is the most likely missing configuration in the deployment?
Select an answer first
24expert · medium
A ConfigMap named 'app-config' is used by multiple deployments. The team wants to prevent accidental changes. They set immutable: true. Later, they need to update a configuration value. What is the correct procedure?
Select an answer first
25expert · hard
A ConfigMap is mounted as a volume in a pod. The ConfigMap is not immutable. The team updates the ConfigMap. They expect the mounted file to update automatically. However, the file does not update. What is the most likely cause?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CKA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Foundation. “CKA” is a trademark of its owner, used for identification only.