When a ConfigMap is mounted as a volume in a Pod, what happens if a key is updated in the ConfigMap?

The Pod is automatically deleted and recreated.

The changes are never reflected in the mounted volume.

The Pod must be restarted to see the changes.

The mounted file is automatically updated after a short delay.

A team needs to store a database password in Kubernetes. They create a Secret using the command: kubectl create secret generic db-password --from-literal=password='S3cr3t!'. Later, they inspect the Secret with kubectl get secret db-password -o yaml. What will they see in the data section?

The data section is empty because the password is stored in stringData.

A team deploys a batch processing workload into a shared namespace. The namespace already has a ResourceQuota that sets requests.cpu: 4 and limits.cpu: 8. The team creates a new Deployment with a single replica whose container spec sets resources.requests.cpu: 500m and resources.limits.cpu: 1000m. The Pod fails to schedule with a 'Forbidden' error. Which additional configuration is most likely required to resolve this issue?

Increase the container's CPU limit to 2000m so it matches the quota's limit.

Ensure the Deployment's Pod template includes both requests.cpu and limits.cpu for every container, and that the sum of all Pod requests and limits in the namespace does not exceed the quota.

Remove the ResourceQuota from the namespace because it is incompatible with Deployments.

Add a LimitRange to the namespace that sets a default CPU request and limit for containers.

In a Kubernetes Pod spec, what is the purpose of setting a `resources.requests` field for a container?

It defines the maximum amount of CPU or memory the container can use before it is terminated.

It guarantees the container will never exceed the specified amount of CPU or memory.

It specifies the minimum amount of CPU or memory the container is guaranteed to be allocated.

It sets the exact amount of CPU and memory that the container will be allocated at runtime.

Certified Kubernetes Application Developer (CKAD)

Domain 4Objective 3

Application Configuration CKAD Practice Questions (Page 2)

Part of the Application Environment, Configuration and Security domain, which accounts for 25% of the CKAD exam. Linux Foundation does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 3–5 from this objective — we provide 14 practice questions to prepare you well beyond it. (estimate)

14questions here

3free pages

8concepts

25%of the exam

Questions 6–10

6foundation · easy
When a ConfigMap is mounted as a volume in a Pod, what happens if a key is updated in the ConfigMap?
Select an answer first
7application · easy
A team needs to store a database password in Kubernetes. They create a Secret using the command: kubectl create secret generic db-password --from-literal=password='S3cr3t!'. Later, they inspect the Secret with kubectl get secret db-password -o yaml. What will they see in the data section?
Select an answer first
8application · medium
A team deploys a batch processing workload into a shared namespace. The namespace already has a ResourceQuota that sets requests.cpu: 4 and limits.cpu: 8. The team creates a new Deployment with a single replica whose container spec sets resources.requests.cpu: 500m and resources.limits.cpu: 1000m. The Pod fails to schedule with a 'Forbidden' error. Which additional configuration is most likely required to resolve this issue?
Select an answer first
9foundation · easy
In a Kubernetes Pod spec, what is the purpose of setting a `resources.requests` field for a container?
Select an answer first
10application · easy
A team needs to store a Docker registry credential so that a Deployment can pull images from a private registry. Which Secret type should they use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CKAD

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Foundation. “CKAD” is a trademark of its owner, used for identification only.

Application Configuration CKAD Practice Questions (Page 2)

Questions 6–10

When a ConfigMap is mounted as a volume in a Pod, what happens if a key is updated in the ConfigMap?

A team needs to store a database password in Kubernetes. They create a Secret using the command: kubectl create secret generic db-password --from-literal=password='S3cr3t!'. Later, they inspect the Secret with kubectl get secret db-password -o yaml. What will they see in the data section?

In a Kubernetes Pod spec, what is the purpose of setting a `resources.requests` field for a container?

A team needs to store a Docker registry credential so that a Deployment can pull images from a private registry. Which Secret type should they use?

Keep studying — Application Environment, Configuration and Security