How are CKA questions generated?

dotCreds builds CKA practice questions from public exam objectives and Linux Foundation exam and documentation references. The questions are written for realistic study practice, not copied from exam dumps.

How are explanations sourced?

Each question includes an explanation and, when available, a source link back to the provider documentation or reference used to validate the answer. That keeps the practice tied to study material you can actually review.

The page tracks today's answered count and accuracy for the 10-question daily set, then saves a 7-day score history on this device so you can see your recent practice trend.

The site is the fastest way to start CKA practice without installing anything. It is built for daily recall, quick weak-topic discovery, and source-backed explanations you can review immediately.

Free CKA Practice Test

CKA Practice Test

Start today's 10-question CKA set with source-backed explanations, local progress, and a fresh rotation every morning.

10 Free Daily Questions Source-backed Explanations 150 Verified Questions

Questions updated at Jul 18, 2026, 1:30 PM CDT

Unlock the full CKA bank

150 verified questions Exam Mode Practice Mode Detailed explanations Weak-area review No subscription - one-time unlock

Get the complete source-backed bank with Interview Questions, the full Study Guide, full Course Notes, detailed explanations, weak-area review, and exam-style practice.

Interview Questions Full Study Guide Full Course Notes Exam Mode Practice Mode Guided Course Detailed explanations Weak-area review No subscription

What you get with free practice

10 Free Questions Daily Fresh set every day from the live bank

Detailed Explanations Learn with clear source-backed answers

Track Your Progress Daily history and performance insights

Upgrade Anytime Unlock the full bank when you are ready

Unlock the full CKA bank.

Get the full bank, Exam Mode, Practice Mode, question sets, random tests, readiness tracking, saved box scores, and review tools for this exam.

The PDF versions keep questions first and move the answer review, explanations, and distractor notes to the back of the file.

150 verified exam-style questions Every choice explained Exam Mode and Practice Mode Question sets and random tests Readiness score and trends Previous test box scores

You've answered 0/10 questions in today's set.

Locked: 140 more questions in the full bank.

Locked: exam simulation mode, practice mode, readiness tracking, and saved review history.

Checkout stays on this page, so you can keep practicing, unlock the full bank, and start Exam Mode or Practice Mode when you are ready.

Cheat Sheets

Why candidates miss this

Resource quotas control the total amount of resources a namespace can consume, but they don't directly manage external traffic exposure. The assumption that a resource quota somehow configures an external load balancer demonstrates a misunderstanding of their distinct purposes within Kubernetes. LoadBalancer Services specifically request external load balancing from the cloud provider. Likely wrong answer: A namespace resource quota Review focus: Kubernetes Services

Interview question

Q: Imagine a project owner wants to expose an application running in your Kubernetes cluster to the internet, but they want to leverage the cloud provider's managed load balancer for scalability and reliability. How would you approach this configuration, and what are the benefits of using a provider-managed load balancer in this scenario? Strong answer: My priority would be to use a LoadBalancer Service. This tells Kubernetes to request the underlying cloud provider to provision an external load balancer and configure it to route traffic to our Service. The benefit is that the cloud provider handles the load balancer's scaling, health checks, and availability, reducing our operational burden. We also benefit from the provider's security features and potentially their pricing models. It's important to understand the costs associated with a provider-managed load balancer, as they can vary significantly.

Understanding of LoadBalancer Service and its purpose
Awareness of cloud provider integration and benefits
Consideration of cost implications
Understanding of operational benefits

Caution: Focusing solely on the technical configuration of the Service without discussing the broader benefits and cost considerations of using a provider-managed load balancer. Also, suggesting a LoadBalancer Service without considering the potential cost implications.

Question 1 A cloud-hosted cluster should expose an application through a provider-managed external load balancer when the platform supports it. What Service behavior is being requested?

Answer choices

A. An external load balancer from the underlying provider when supported
B. A namespace resource quota
C. An etcd member replacement
D. A kubeconfig context switch

Correct answer

An external load balancer from the underlying provider when supported

A LoadBalancer Service asks the underlying provider to provision an external load balancer when the environment supports that integration. The correct choice, An external load balancer from the underlying provider when supported, describes that Service behavior. Quotas, etcd member replacement, and kubeconfig context changes are separate administrative tasks.

Wrong-answer review

B. A namespace resource quota: A namespace resource quota limits resource usage and does not publish Service traffic externally.
C. An etcd member replacement: An etcd member replacement changes control-plane storage membership and does not expose applications.
D. A kubeconfig context switch: A kubeconfig context switch changes the CLI target and cannot provision external traffic exposure.

Extra learning features

Objective/domain: Services and Networking

Source: Service

Question 2 A cluster has multiple Ingress controllers installed. A new Ingress must be handled by the nginx controller rather than another controller. What should identify the intended controller?

A. The Pod's emptyDir volume
B. The IngressClass referenced by the Ingress
C. The CronJob schedule expression
D. The kubeconfig user allowed to delete backups

The IngressClass referenced by the Ingress

Source: Ingress

Question 3 A Pod should stay out of Service endpoints until its HTTP health endpoint reports that the app can handle requests. Which probe should be configured?

A. A StorageClass provisioner
B. Readiness probe
C. A NodePort external IP
D. A ClusterRole only

Readiness probe

Objective/domain: Workloads and Scheduling

Source: Configure Liveness, Readiness and Startup Probes

Question 4 Which control-plane component exposes the Kubernetes API that kubectl and other clients use to interact with the cluster?

A. A PersistentVolumeClaim
B. CoreDNS
C. kube-apiserver
D. kube-proxy

kube-apiserver

Objective/domain: Cluster Architecture, Installation, and Configuration

Source: Kubernetes Components

Question 5 A stateless web application needs replicated Pods, rolling updates, and rollback support when a new image fails. Which Deployment behavior supports that workload?

A. Only user certificates
B. Only PersistentVolume reclaim policies
C. ReplicaSets and rolling updates for stateless application Pods
D. Only external DNS zones

ReplicaSets and rolling updates for stateless application Pods

Source: Deployments

Question 6 Which cluster datastore holds Kubernetes state as a consistent key-value store?

A. It schedules pods onto nodes
B. It stores Kubernetes cluster data as a consistent key-value store
C. It runs DNS resolution for application containers only
D. It proxies Service traffic on every node

It stores Kubernetes cluster data as a consistent key-value store

Source: Operating etcd clusters for Kubernetes

Question 7 kubectl cannot connect to the API server on a kubeadm control-plane node. Which troubleshooting path best targets the control-plane service?

A. Only change every Service to NodePort
B. Only remove all labels from Deployments
C. Check API server static Pod health, kubelet, certificates, and etcd connectivity
D. Only expand every PVC

Check API server static Pod health, kubelet, certificates, and etcd connectivity

Objective/domain: Troubleshooting

Question 8 A Pod needs application configuration values from a ConfigMap. How can those values be exposed to containers?

A. Only by creating a LoadBalancer Service
B. Only by draining every node
C. They can be mounted as volumes or used through environment variables
D. Only by changing the kube-scheduler binary

They can be mounted as volumes or used through environment variables

Objective/domain: Storage

Source: Volumes

Question 9 A Service has no endpoints, but the intended application Pods are running and ready. What should be checked first?

A. Whether the Service selector matches labels on ready Pods
B. Whether kubeadm init was run twice on a worker
C. Whether the PVC access mode is ReadOnlyMany only
D. Whether the Service has an unrelated RBAC Role

Whether the Service selector matches labels on ready Pods

Source: Debug Services

Question 10 A team wants to increase the requested size of an existing PersistentVolumeClaim. What must be true of the storage implementation?

A. Every Pod in the cluster must be privileged
B. The Service must be headless
C. All RoleBindings must be cluster-scoped
D. The StorageClass and volume plugin must support expansion

The StorageClass and volume plugin must support expansion

Source: Expanding Persistent Volumes Claims

CKA Practice Test

Unlock the full CKA bank

Practice with explanations that teach.

What you get with free practice

A cloud-hosted cluster should expose an application through a provider-managed external load balancer when the platform supports it. What Service behavior is being requested?

A cluster has multiple Ingress controllers installed. A new Ingress must be handled by the nginx controller rather than another controller. What should identify the intended controller?

A Pod should stay out of Service endpoints until its HTTP health endpoint reports that the app can handle requests. Which probe should be configured?

Which control-plane component exposes the Kubernetes API that kubectl and other clients use to interact with the cluster?

A stateless web application needs replicated Pods, rolling updates, and rollback support when a new image fails. Which Deployment behavior supports that workload?

Which cluster datastore holds Kubernetes state as a consistent key-value store?

kubectl cannot connect to the API server on a kubeadm control-plane node. Which troubleshooting path best targets the control-plane service?

A Pod needs application configuration values from a ConfigMap. How can those values be exposed to containers?

A Service has no endpoints, but the intended application Pods are running and ready. What should be checked first?

A team wants to increase the requested size of an existing PersistentVolumeClaim. What must be true of the storage implementation?

You are viewing today’s free 10. Unlock 140 more questions.

Build your practice session

Set your target once.

Customize your session

Unlock the full CKA bank.

7-day score keeper

Keep today’s practice moving

Answer choices

Correct answer

Wrong-answer review

Extra learning features

Why candidates miss this

Interview question

Answer choices

Correct answer

Answer choices

Correct answer

Answer choices

Correct answer

Answer choices

Correct answer

Answer choices

Correct answer

Answer choices

Correct answer

Answer choices

Correct answer

Answer choices

Correct answer

Answer choices

Correct answer

How are CKA questions generated?

How are explanations sourced?

What score do I get?

Why use this site?