← KCNA hub

KCNA — Kubernetes Fundamentals

44% of the KCNA exam. Sample questions below; the full library has 56 questions tagged to this domain.

Sample questions on Kubernetes Fundamentals

Kubernetes Fundamentals

Q1. What is a StatefulSet used for?

Reveal answer and explanations
  1. A Managing temporary batch jobs

    Incorrect. Jobs handle batch workloads.

  2. B Running applications requiring stable network identity and persistent storage

    Correct. StatefulSets maintain stable Pod identity, ordered deployment/termination, and are ideal for databases and caching systems.

  3. C Exposing applications outside the cluster

    Incorrect. Services and Ingress expose applications.

  4. D Running stateless web applications

    Incorrect. Deployments handle stateless apps.

Kubernetes Fundamentals

Q2. What does kube-proxy normally implement on each node?

Reveal answer and explanations
  1. A Implementing Pod overlay networking between nodes

    Incorrect. Pod overlay networking is handled by the CNI plugin or network implementation.

  2. B Encrypting every packet between Pods in the cluster

    Incorrect. kube-proxy does not provide universal network encryption.

  3. C Maintaining node-level Service load-balancing rules

    Correct. kube-proxy implements Kubernetes Services on nodes by maintaining packet forwarding/load-balancing rules.

  4. D Terminating external HTTP Ingress traffic

    Incorrect. Ingress controllers handle HTTP ingress behavior, not kube-proxy.

Kubernetes Fundamentals

Q3. What does RBAC stand for in Kubernetes, and what does it control?

Reveal answer and explanations
  1. A Resource Block Access Control; prevents certain resources from being accessed

    Incorrect. RBAC is about authorization, not blocking resources.

  2. B Request-Based API Checking; validates all API requests

    Incorrect. API validation is separate from RBAC.

  3. C Replica-Based Authentication Control; manages Pod authentication

    Incorrect. RBAC doesn't directly manage Pod authentication.

  4. D Role-Based Access Control; determines which users and serviceaccounts can perform API actions

    Correct. RBAC uses Roles/ClusterRoles and RoleBindings/ClusterRoleBindings to control API access.

Kubernetes Fundamentals

Q4. An operator wants to list only Pods whose status.phase is Running without relying on labels. What is the purpose of kubectl field selectors?

Reveal answer and explanations
  1. A To encrypt selected object fields before they are stored

    Incorrect. Encryption at rest is configured separately from field selectors.

  2. B To add new fields to Kubernetes objects at query time

    Incorrect. Field selectors query existing fields; they do not add fields.

  3. C To modify object fields across many resources

    Incorrect. Field selectors filter list/watch operations; they do not mutate objects.

  4. D Filter objects by supported field values

    Correct. Field selectors filter resources by supported field paths such as metadata.name or status.phase.

Kubernetes Fundamentals

Q5. How do CRDs (Custom Resource Definitions) extend Kubernetes?

Reveal answer and explanations
  1. A By replacing Deployments with custom controllers

    Incorrect. CRDs complement built-in resources; they don't replace them.

  2. B By modifying kubelet behavior on nodes

    Incorrect. CRDs are API-level extensions; kubelet is unmodified.

  3. C By increasing the number of Pods a cluster can run

    Incorrect. CRDs don't affect Pod count limits.

  4. D By adding new types of resources that the API server can manage

    Correct. CRDs allow you to define custom resource types that the API server treats like built-in resources.

Drill Kubernetes Fundamentals with the full bankDomain Drill mode targets your weak areas — paid feature

How this domain is tested

Kubernetes Fundamentals accounts for 44% of the KCNA exam. Expect questions that test recall of terminology and the ability to read short scenarios — not deep configuration. Use the sample questions above as difficulty calibration; if any feel hard, the rest of our 56-question domain bank will close those gaps.