A security team wants to ensure that all containers in a namespace run as a non-root user and do not gain additional privileges. They want to enforce this at the namespace level. What should they configure?

Create a NetworkPolicy that blocks all ingress traffic to the namespace.

Set a securityContext on each pod to run as non-root and drop all capabilities.

Use a ResourceQuota to limit the number of privileged containers.

Apply a Pod Security Standard (PSS) that enforces the 'restricted' policy to the namespace.

A cluster administrator wants to monitor the resource usage of all nodes and pods in the cluster. Which tool is designed for this purpose?

Prometheus with the Kubernetes metrics API

What is a primary purpose of using namespaces in Kubernetes?

To isolate resources and provide a scope for names

To enforce security policies on pods

To manage the lifecycle of pods

To allocate CPU and memory resources to applications

A pod is stuck in the 'Pending' state. The team checks the pod events and sees '0/1 nodes are available: 1 Insufficient cpu.' What is the most likely cause?

The pod's liveness probe is failing.

The pod's service account does not have permission to run on the node.

The pod's container image is failing to pull.

The pod's CPU request exceeds the available CPU on any node.

Kubernetes and Cloud Native Associate (KCNA)

Domain 2Objective 2

Administration KCNA Practice Questions (Page 4)

Part of the Container Orchestration domain, which accounts for 28% of the KCNA exam. Linux Foundation does not publish an official question count, but from its 90-minute exam (~35–60 total, ~10–17 in this domain), expect 5–9 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

7concepts

28%of the exam

Questions 16–20

16application · medium
A security team wants to ensure that all containers in a namespace run as a non-root user and do not gain additional privileges. They want to enforce this at the namespace level. What should they configure?
Select an answer first
17foundation · easy
Which command is used to mark a Kubernetes node as unschedulable so that no new pods are placed on it during maintenance?
Select an answer first
18application · medium
A cluster administrator wants to monitor the resource usage of all nodes and pods in the cluster. Which tool is designed for this purpose?
Select an answer first
19foundation · easy
What is a primary purpose of using namespaces in Kubernetes?
Select an answer first
20application · medium
A pod is stuck in the 'Pending' state. The team checks the pod events and sees '0/1 nodes are available: 1 Insufficient cpu.' What is the most likely cause?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to KCNA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Foundation. “KCNA” is a trademark of its owner, used for identification only.