A ConfigMap is marked immutable. The team attempts to update it using kubectl edit. What happens?

The update succeeds, but the pods do not see the change.

The ConfigMap is deleted and recreated automatically.

The update succeeds, but only new pods see the change.

The update is rejected with an error.

A configuration file for an application is stored in a ConfigMap named 'app-config' with key 'app.properties'. The application reads this file from a mounted volume. The team expects that when the ConfigMap is updated, the file in the pod should eventually reflect the change without restarting the pod. However, the ConfigMap is marked immutable. What is the impact?

The file will update after a kubelet sync period, but only if the pod is restarted.

The ConfigMap cannot be updated, so the file will never change; you must create a new ConfigMap and update the pod.

The file will update automatically because volume mounts are always live.

The ConfigMap can be updated, but the pod must be restarted to see the change.

A pod mounts a Secret named 'tls-keys' as a volume. The Secret contains two keys: 'tls.crt' and 'tls.key'. The application expects the files to have read-only permissions (0440) and the Secret to be immutable. Which configuration achieves this?

Use a ConfigMap instead of a Secret because it supports defaultMode.

Set items with mode: 0440 for each key and immutable: true in the Secret.

Set defaultMode: 0440 in the volume and do not set immutable.

Set defaultMode: 0440 in the volume and immutable: true in the Secret.

A deployment needs to pull an image from a private registry. The registry credentials are stored in a Secret of type docker-registry named 'regcred'. The pod spec must reference this Secret to authenticate. Which field in the pod spec should reference 'regcred'?

spec.imagePullSecrets with name: regcred

spec.containers[].imagePullPolicy

spec.containers[].env with secretKeyRef

spec.volumes with secret.secretName

An administrator needs to create a ConfigMap from a file named 'logging.conf' and then mount it as a volume in a pod. The file should be available at /etc/logging/logging.conf. Which commands and pod spec achieve this?

kubectl create configmap logging-config --from-file=logging.conf, then mount with volume and volumeMount with mountPath: /etc/logging

kubectl create configmap logging-config --from-file=logging.conf, then use envFrom to inject as environment variables

kubectl create configmap logging-config --from-file=logging.conf, then mount with volume and volumeMount with mountPath: /etc/logging and subPath: logging.conf

kubectl create configmap logging-config --from-literal=logging.conf=..., then mount as volume

Certified Kubernetes Administrator (CKA)

Domain 3Objective 2

Use ConfigMaps and Secrets to Configure Applications CKA Practice Questions (Page 7)

Part of the Workloads and Scheduling domain, which accounts for 15% of the CKA exam. Linux Foundation does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 2–2 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

9concepts

15%of the exam

Questions 31–35

31expert · easy
A ConfigMap is marked immutable. The team attempts to update it using kubectl edit. What happens?
Select an answer first
32application · medium
A configuration file for an application is stored in a ConfigMap named 'app-config' with key 'app.properties'. The application reads this file from a mounted volume. The team expects that when the ConfigMap is updated, the file in the pod should eventually reflect the change without restarting the pod. However, the ConfigMap is marked immutable. What is the impact?
Select an answer first
33application · medium
A pod mounts a Secret named 'tls-keys' as a volume. The Secret contains two keys: 'tls.crt' and 'tls.key'. The application expects the files to have read-only permissions (0440) and the Secret to be immutable. Which configuration achieves this?
Select an answer first
34application · easy
A deployment needs to pull an image from a private registry. The registry credentials are stored in a Secret of type docker-registry named 'regcred'. The pod spec must reference this Secret to authenticate. Which field in the pod spec should reference 'regcred'?
Select an answer first
35application · medium
An administrator needs to create a ConfigMap from a file named 'logging.conf' and then mount it as a volume in a pod. The file should be available at /etc/logging/logging.conf. Which commands and pod spec achieve this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CKA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Foundation. “CKA” is a trademark of its owner, used for identification only.