Open the app

Free Certified Kubernetes Administrator CKA practice questions

10 free sample questions for the Certified Kubernetes Administrator CKA exam, each with an explanation that starts with why a wrong answer is wrong. No account needed. Try the first one now.

Certified Kubernetes Administrator sample10 free questions
A Deployment runs image busybox:1.36 with no command or args. Its Pods show Completed, then CrashLoopBackOff, and kubectl describe pod shows Last State: Terminated, Reason: Completed, Exit Code: 0. What is happening?

Why that one is wrong. An out-of-memory kill is reported as OOMKilled with exit code 137, not Completed with exit code 0.

Why that one is wrong. A pull failure shows ErrImagePull or ImagePullBackOff and the container never runs. Here it ran and exited cleanly.

Why that one is wrong. Probe-driven kills are logged as liveness failures and the container is terminated with a non-zero code, not Completed.

Why B is right. The container finishes successfully, but Deployment Pods use restartPolicy Always, so repeated exits trigger back-off. Give it a long-running command.

CrashLoopBackOff with exit code 0 means the process finished normally. Deployments expect long-running processes, so give the container a command that keeps running.

What the exam covers

  • Cluster Architecture, Installation & Configuration (25%)
  • Workloads & Scheduling (15%)
  • Services & Networking (20%)
  • Storage (10%)
  • Troubleshooting (30%)

A few more sample questions

Sample question 1. Before patching worker02 you run kubectl drain worker02. It refuses to continue and reports two problems: the node runs Pods managed by DaemonSets (kube-proxy and the CNI agent), and one Deployment-managed Pod uses an emptyDir volume whose scratch data can be discarded. There are no unmanaged Pods on the node. Which flags let the drain proceed while still evicting Pods safely? (Choose two.)

  1. --ignore-daemonsets
  2. --force
  3. --delete-emptydir-data
  4. --grace-period=0
  5. --disable-eviction

Sample question 2. A Gateway named edge in namespace infra has a single HTTP listener with no allowedRoutes field. An HTTPRoute in namespace shop sets parentRefs to name: edge, namespace: infra, but its status reports that it was not accepted by the parent. What change lets the route attach?

  1. Set the listener's allowedRoutes.namespaces.from to All, or to Selector with a label that matches shop.
  2. Create a ReferenceGrant in infra that allows HTTPRoutes from shop to reference the edge Gateway.
  3. Add spec.hostnames to the HTTPRoute, because a route with no hostname is never accepted by a listener.
  4. Delete the parentRefs namespace field so the HTTPRoute uses its own namespace and finds the Gateway.

Sample question 3. You need a Deployment named web in the current namespace that runs three replicas of the image nginx:1.27. Which command creates it in one step?

  1. kubectl create deployment web --image=nginx:1.27 --replicas=3
  2. kubectl run web --image=nginx:1.27 --replicas=3 --restart=Always
  3. kubectl create deployment web --image=nginx:1.27 --count=3
  4. kubectl scale deployment web --replicas=3 --image=nginx:1.27

Answer them with explanations

Certified Kubernetes Administrator is free practice for now

Answer the free sample questions above, as many times as you like. Timed practice tests for Certified Kubernetes Administrator are not on sale yet.

How to trust this practice

  • Every answer explains why, and cites its source.
  • Practice tests are built around the vendor’s published exam domains.
  • These are practice questions, not real exam questions.

See the free sample questions for every certification

Take it with you

  • Download on the App Store
  • Get it on Google Play