Application Configuration CKAD Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is a recommended practice when consuming Secrets as environment variables?

   • AStore secrets in ConfigMaps to avoid base64 encoding.
   • BMount secrets as volumes instead of environment variables to reduce exposure.
   • CAlways use `envFrom` to load all secrets at once for simplicity.
   • DUse environment variables for all secrets because they are easier to manage.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   How are Secret data values encoded in a YAML manifest?

   • AThey are hashed with SHA-256.
   • BThey are stored as plain text.
   • CThey are encrypted with AES-256.
   • DThey are base64-encoded.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the default Secret type when creating a Secret with `kubectl create secret generic`?

   • Akubernetes.io/tls
   • BOpaque
   • Ckubernetes.io/dockerconfigjson
   • Dkubernetes.io/basic-auth
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A development team shares a namespace for testing. They want to ensure that any Pod created without explicit resource requests or limits gets sensible defaults, and that no single Pod can request more than 2 CPU cores or 4Gi memory. Which set of objects should they create?

   • AA LimitRange with max: {cpu: 2, memory: 4Gi} and default: {cpu: 500m, memory: 512Mi}.
   • BA ResourceQuota with requests.cpu: 2 and limits.memory: 4Gi, and no LimitRange.
   • CA LimitRange with min: {cpu: 100m, memory: 128Mi} and max: {cpu: 2, memory: 4Gi}.
   • DA ResourceQuota with requests.cpu: 2 and limits.cpu: 4, and a LimitRange with default requests and limits.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is the role of a LimitRange in a Kubernetes namespace?

   • AIt controls which nodes Pods can be scheduled on based on resource availability.
   • BIt sets the maximum number of Pods that can run in the namespace.
   • CIt restricts the total CPU and memory usage of all Pods combined in the namespace.
   • DIt defines default resource requests and limits for containers that do not specify them.
   Reveal Solution Discussion Select an answer first