KCNA Practice Exam 1, free sample

Question 1

A team relies on the published OpenAPI schema to validate its manifests completely. What does the warning say?

Accepted Answer

The rules are usually incomplete

Answer

The schema is authoritative

Answer

Validation happens only in clients

Answer

Only the Discovery API validates

Question 2

An engineer asks where the controller half of an operator normally runs once it is deployed to a cluster. What does the documentation say?

Accepted Answer

Outside the control plane, like any containerized workload

Answer

On every node, as a privileged agent placed by a DaemonSet

Answer

Inside the control plane, alongside the scheduler process

Answer

In the API server process, loaded as a compiled extension

Question 3

An engineer denies developers direct Secret reads but still lets them create Deployments in the namespace. What does that leave open?

Accepted Answer

Reading any Secret in that namespace

Answer

Only Secrets they explicitly list

Answer

Nothing beyond the Deployment itself

Answer

Reading Secrets in every namespace

Question 4

An engineer notices a Pod is being ignored when the autoscaler computes CPU utilization. Which condition does the documentation give for that?

Accepted Answer

A container in the Pod has no relevant resource request set

Answer

The Pod was created after the most recent sync period began

Answer

The Pod reports a raw metric rather than a utilization value

Answer

The Pod carries a label outside the scaleTargetRef selector

Question 5

A team plans to overcommit huge pages on its nodes the way it overcommits memory. What does the note say?

Accepted Answer

Huge pages cannot be overcommitted

Answer

Overcommit needs a feature gate

Answer

Overcommit is allowed per node

Answer

Only requests may be overcommitted

Practice Exam 1