Administration KCNA Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A team wants to restrict traffic so that only pods with the label 'app=frontend' can communicate with pods labeled 'app=backend'. What should they create?

   • AA NetworkPolicy that allows ingress to backend pods only from pods with the label 'app=frontend'.
   • BA securityContext that sets the network policy on each pod.
   • CA ResourceQuota that limits the number of network connections.
   • DA Role and RoleBinding that grants network permissions to the frontend pods.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   In Kubernetes, what is the purpose of setting a resource request for a container?

   • AIt defines the amount of storage the container can use
   • BIt reserves a minimum amount of CPU and memory for the container
   • CIt sets the priority of the container relative to other containers
   • DIt limits the maximum CPU and memory the container can use
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which field in a pod's security context allows a container to run as a non-root user?

   • ArunAsUser
   • Bprivileged
   • CallowPrivilegeEscalation
   • DreadOnlyRootFilesystem
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   In Kubernetes RBAC, what is the purpose of a RoleBinding?

   • AIt restricts access to a specific pod
   • BIt creates a new namespace for role-based access control
   • CIt defines the permissions that a user or service account has
   • DIt grants the permissions defined in a Role to a specific user, group, or service account
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A new team joins the company and needs to deploy workloads to the cluster. The administrator wants to provide a dedicated space for the team without giving them access to other teams' resources. What should the administrator do?

   • ACreate a new service account for the team and use it for all deployments.
   • BCreate a new namespace for the team and assign RBAC permissions scoped to that namespace.
   • CCreate a new cluster for the team to ensure complete isolation.
   • DCreate a new node pool for the team and schedule all their pods there.
   Reveal Solution Discussion Select an answer first