Use ConfigMaps and Secrets to Configure Applications CKA Practice Questions (Page 8)

Questions 36–38

1. 36application · medium

   A security policy requires that all Secrets be immutable. An application needs a Secret named 'api-keys' with a key 'api_key' to be injected as an environment variable API_KEY. Which manifest snippet correctly creates the immutable Secret and injects the value?

   • ASecret with immutable: true and pod envFrom
   • BSecret with immutable: false and pod env with valueFrom.secretKeyRef
   • CSecret with immutable: true and pod env with valueFrom.secretKeyRef
   • DConfigMap with immutable: true and pod env with valueFrom.configMapKeyRef
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   A container's command needs to use a value from a ConfigMap as a command-line argument. The ConfigMap key is 'mode' and the value is 'production'. Which pod spec correctly passes this as an argument?

   • ASet args: ["--mode=$(MODE)"] without defining the env var
   • BSet env with configMapKeyRef to MODE, then command: ["./app", "--mode=$(MODE)"]
   • CUse command: ["./app", "--mode=production"] directly
   • DMount the ConfigMap as a volume and use command: ["./app", "--mode=$(cat /etc/config/mode)"]
   Reveal Solution Discussion Select an answer first
3. 38application · medium

   A ConfigMap named 'app-config' has multiple keys. The application expects a specific file 'settings.json' in the mounted volume. The team wants to avoid exposing other keys in the volume. Which volume configuration achieves this?

   • AMount the entire ConfigMap volume and rely on the application to ignore other files.
   • BUse items in the volume to select only 'settings.json' and mount the volume.
   • CCreate a separate ConfigMap with only the needed key.
   • DUse subPath to mount the entire ConfigMap as a single file.
   Reveal Solution Discussion Select an answer first