A company runs a legacy application in a container on a single host. The application listens on port 8080 inside the container. External clients need to access the application on port 80 of the host. What must be configured to allow this access?

A DNS record pointing to the container's IP address.

A firewall rule that allows inbound traffic to the container's IP.

A network namespace that shares the host's network stack.

A port mapping from host port 80 to container port 8080.

A company runs a web application as a set of containers on a single host. The application experiences variable traffic, and the team manually starts and stops containers to handle load. They also need to ensure that if a container fails, it is automatically restarted. Which solution addresses these operational needs?

Use Docker Compose to define the application and manually run `docker-compose up` when load increases.

Use a container orchestrator like Kubernetes to manage the containers.

Write a shell script that periodically checks container health and restarts failed containers.

Run all containers with the `--restart=always` policy and manually add more containers when needed.

A development team maintains a container image for a web application. They frequently update the application code, but the base OS and dependencies rarely change. They want to minimize the time and bandwidth required to push and pull the image to the registry. What is the most effective strategy?

Rebuild the image from scratch each time, including the base OS and dependencies.

Store the image as a single-layer tarball to simplify the push and pull process.

Use a multi-stage build to create a smaller final image.

Leverage Docker layer caching by building the image with the base OS and dependencies first, then adding the application code as the final layer.

What is the primary role of a container runtime?

To provide a user interface for managing containers.

To build container images from a Dockerfile.

To store container images in a registry.

To execute containers by managing their lifecycle and interacting with the host kernel.

What is the purpose of Linux capabilities in container security?

To allow containers to share the host's network namespace.

To grant specific privileges to a container process without giving it full root access.

To limit the amount of CPU and memory a container can use.

To encrypt the container's filesystem.

Kubernetes and Cloud Native Associate (KCNA)

Domain 2Objective 1

Containerization KCNA Practice Questions (Page 4)

Part of the Container Orchestration domain, which accounts for 28% of the KCNA exam. Linux Foundation does not publish an official question count, but from its 90-minute exam (~35–60 total, ~10–17 in this domain), expect 5–9 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

8concepts

28%of the exam

Questions 16–20

16application · medium
A company runs a legacy application in a container on a single host. The application listens on port 8080 inside the container. External clients need to access the application on port 80 of the host. What must be configured to allow this access?
Select an answer first
17application · medium
A company runs a web application as a set of containers on a single host. The application experiences variable traffic, and the team manually starts and stops containers to handle load. They also need to ensure that if a container fails, it is automatically restarted. Which solution addresses these operational needs?
Select an answer first
18application · medium
A development team maintains a container image for a web application. They frequently update the application code, but the base OS and dependencies rarely change. They want to minimize the time and bandwidth required to push and pull the image to the registry. What is the most effective strategy?
Select an answer first
19foundation · easy
What is the primary role of a container runtime?
Select an answer first
20foundation · easy
What is the purpose of Linux capabilities in container security?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to KCNA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Foundation. “KCNA” is a trademark of its owner, used for identification only.