dc dotCreds
Certified Kubernetes Administrator

CKA Practice Test

Start today's 10-question CKA set with source-backed explanations, local progress, and a fresh rotation every morning.

10 Free Daily Questions Source-backed Explanations 150 Verified Questions

Questions updated at Jul 10, 2026, 12:01 AM CDT

Guided Course Included Learn CKA step by step. Structured lessons, progress tracking, practice questions, and per-exam Course Notes covering every section in this bank.
Step-by-step lessons Per-exam Course Notes All sections included Practice tied to the same bank
CKA icon

CKA

Certified Kubernetes Administrator

Why this page works

  • Daily exam-aligned questions
  • Source links on every explanation
  • Local progress saved automatically
  • Email sync path ready for later
  • Apps provide deeper drills when available
One-time unlock

Unlock the full CKA bank

150 verified exam-style questions $3.99 one-time No subscription Secure checkout Instant unlock

Get the complete source-backed bank with correct-answer explanations, distractor breakdowns, saved review, full Course Mode, and per-exam Course Notes.

Instant unlock • Secure checkout • No subscription

Exam Mode Practice Mode Course Mode Course Notes Weak-area review Previous scores Source links Every choice explained No ads
See bundle and PDF options Already Pro? Open dashboard

Includes full Course Mode and Course Notes. We will confirm your site email in one quick checkout step.

Why DotCreds?

Practice with explanations that teach.

Source links for every answer Every wrong answer explained Guided Course included Practice and Exam Mode Weak-area tracking Same verified bank across web practice
Today's 10 CKA questions

Use this CKA practice test to review Certified Kubernetes Administrator. Questions rotate daily and each explanation links to the source used to validate the answer.

Today’s Set
10 questions
Rotates at 10:00 AM local time
Progress
0/10
Answered on this page
Accuracy
0%
Loading countdown…

150 verified questions are in the live bank. Free daily questions are selected from a rotating sample set. Unlock Pro to access the full question bank.

Question 1 of 10
Objective CKA-WS-01 Workloads and Scheduling

A stateless web application needs three replicated Pods, rolling updates, rollback support, and automatic replacement when a replica fails. Which workload controller fits this requirement?

Concept tested: Workloads and Scheduling (CKA-WS-01)
Question 2 of 10
Objective CKA-CAIC-07 Cluster Architecture, Installation, and Configuration

A worker node has kubelet installed, but Pods cannot start because no software is available to run the containers. Which node component is missing?

Concept tested: Cluster Architecture, Installation, and Configuration (CKA-CAIC-07)
Question 3 of 10
Objective CKA-WS-05 Workloads and Scheduling

A workload should process a finite batch of records and finish successfully rather than stay running as a long-lived service. What behavior should the controller provide?

Concept tested: Workloads and Scheduling (CKA-WS-05)
Question 4 of 10
Objective CKA-CAIC-02 Cluster Architecture, Installation, and Configuration

Which control-plane component exposes the Kubernetes API that kubectl and other clients use to interact with the cluster?

Concept tested: Cluster Architecture, Installation, and Configuration (CKA-CAIC-02)
Question 5 of 10
Objective CKA-WS-02 Workloads and Scheduling

After an image update, a Deployment stops reaching the desired number of available replicas. The administrator needs to inspect the rollout and return to a prior revision if necessary. What action is appropriate?

Concept tested: Workloads and Scheduling (CKA-WS-02)
Question 6 of 10
Objective CKA-CAIC-10 Cluster Architecture, Installation, and Configuration

An administrator runs kubectl and unexpectedly connects to the wrong cluster and namespace. Which kubeconfig setting should be checked first?

Concept tested: Cluster Architecture, Installation, and Configuration (CKA-CAIC-10)
Question 7 of 10
Objective CKA-WS-03 Workloads and Scheduling

A database workload needs stable Pod names, ordered rollout behavior, and durable identity across rescheduling. Which Kubernetes workload controller is the best fit?

Concept tested: Workloads and Scheduling (CKA-WS-03)
Question 8 of 10
Objective CKA-CAIC-14 Cluster Architecture, Installation, and Configuration

A controller Pod will list Pods and update ConfigMaps in one namespace. The administrator wants a dedicated workload identity with only those permissions. What should be configured?

Concept tested: Cluster Architecture, Installation, and Configuration (CKA-CAIC-14)
Question 9 of 10
Objective CKA-WS-04 Workloads and Scheduling

A log collector must run on every selected worker node, and new matching nodes should receive the collector automatically when they join. What capability is required?

Concept tested: Workloads and Scheduling (CKA-WS-04)
Question 10 of 10
Objective CKA-CAIC-12 Cluster Architecture, Installation, and Configuration

You need an RBAC object that can define permissions at cluster scope rather than only inside one namespace. Which object type provides that scope?

Concept tested: Cluster Architecture, Installation, and Configuration (CKA-CAIC-12)
Locked preview

You are viewing today’s free 10. Unlock 140 more questions.

Unlock full bank
Daily sample Rotating practice Free daily questions are selected from a rotating sample set.
Pro bank Full access Unlock Pro to access the full question bank, Exam Mode, Practice Mode, and random tests.
CKA Pro $3.99 one-time

Pro mode for this exam includes the full bank, Practice Mode, Exam Mode, full Course Mode, and Course Notes.

50 Exam Practice Test $1.99 one-time

A 50-question CKA PDF for short review sessions. Questions come first, then the answer review and explanations later in the file.

Linux / DevOps Access Bundle $6.99/month

Unlock Pro mode across Linux systems, Kubernetes, Terraform, data platform, and TensorFlow practice.

Pro mode forLFCS, CKA, Terraform Associate, Databricks ML Associate, TensorFlow Developer

Choose an unlock option to continue. We will confirm your site email in one quick checkout step.

Secure checkout powered by Stripe. Source-backed questions. Not brain dumps. Checkout stays on this page and unlocks the same Pro builder on this practice page.

Purchase options

Unlock the full CKA bank. No ads.

Get the full bank, Exam Mode, Practice Mode, question sets, random tests, readiness tracking, saved box scores, and review tools for this exam.

The PDF versions keep questions first and move the answer review, explanations, and distractor notes to the back of the file.

150 verified exam-style questions Every choice explained Exam Mode and Practice Mode Question sets and random tests Readiness score and trends Previous test box scores

You've answered 0/10 questions in today's set.

Locked: 140 more questions in the full bank.

Locked: exam simulation mode, practice mode, readiness tracking, and saved review history.

Checkout stays on this page, so you can keep practicing, unlock the full bank, and start Exam Mode or Practice Mode when you are ready.

No ads

7-day score keeper

Answer questions today and this will become a rolling 7-day scorecard.

Local history
Optional progress sync

Keep today’s practice moving

Guest progress saves automatically on this device. Add an email later when you want a magic link that keeps your daily CKA practice in sync across browsers.

Guest progress saves on this device automatically

Guest progress is available without an account.

Official exam resources

Use these official Linux Foundation resources alongside the daily practice set. They cover the provider's own exam page, study guide, or prep material.

Need adjacent Linux Foundation practice pages too? Linux Foundation practice hub.

Source-backed answer review

The free daily CKA set includes crawlable question text, answer choices, correct answer labels, objective mapping, and source links. Only the first SEO card includes answer explanations. Pro-only bank questions stay locked; this section mirrors only the 10 free daily questions already shown on this page.

Question 1 A stateless web application needs three replicated Pods, rolling updates, rollback support, and automatic replacement when a replica fails. Which workload controller fits this requirement?

Answer choices

  1. A. IngressClass only
  2. B. Namespace
  3. C. PersistentVolume
  4. D. Deployment

Correct answer

Deployment

A Deployment manages replicated stateless Pods through a ReplicaSet and supports declarative rolling updates and rollbacks. The correct choice, Deployment, matches the need for replica management and update control. IngressClass handles routing-controller selection, Namespace provides a naming scope, and PersistentVolume represents storage rather than workload rollout behavior.

Wrong-answer review

  • A. IngressClass only: IngressClass only selects which controller handles Ingress resources; it does not manage application replicas.
  • B. Namespace: Namespace groups resources in a naming scope but does not create or roll out Pods.
  • C. PersistentVolume: PersistentVolume represents storage capacity and does not maintain replicated workloads.

Objective/domain: Workloads and Scheduling (CKA-WS-01)

Source: Deployments

Question 2 A worker node has kubelet installed, but Pods cannot start because no software is available to run the containers. Which node component is missing?

Answer choices

  1. A. kube-proxy only
  2. B. CoreDNS only
  3. C. kube-scheduler only
  4. D. The container runtime

Correct answer

The container runtime

Objective/domain: Cluster Architecture, Installation, and Configuration (CKA-CAIC-07)

Source: Kubernetes Components

Question 3 A workload should process a finite batch of records and finish successfully rather than stay running as a long-lived service. What behavior should the controller provide?

Answer choices

  1. A. Pods that run to completion for batch work
  2. B. Persistent identity for stateful Pods only
  3. C. Permanent cluster DNS for Services
  4. D. Node-level packet forwarding rules only

Correct answer

Pods that run to completion for batch work

Objective/domain: Workloads and Scheduling (CKA-WS-05)

Source: Jobs

Question 4 Which control-plane component exposes the Kubernetes API that kubectl and other clients use to interact with the cluster?

Answer choices

  1. A. A PersistentVolumeClaim
  2. B. CoreDNS
  3. C. kube-apiserver
  4. D. kube-proxy

Correct answer

kube-apiserver

Objective/domain: Cluster Architecture, Installation, and Configuration (CKA-CAIC-02)

Source: Kubernetes Components

Question 5 After an image update, a Deployment stops reaching the desired number of available replicas. The administrator needs to inspect the rollout and return to a prior revision if necessary. What action is appropriate?

Answer choices

  1. A. Delete etcd data without a backup
  2. B. Change every Service to ExternalName
  3. C. Remove all namespace quotas
  4. D. Use rollout history/status and undo the Deployment if needed

Correct answer

Use rollout history/status and undo the Deployment if needed

Objective/domain: Workloads and Scheduling (CKA-WS-02)

Source: Deployments

Question 6 An administrator runs kubectl and unexpectedly connects to the wrong cluster and namespace. Which kubeconfig setting should be checked first?

Answer choices

  1. A. The PersistentVolume reclaim policy only
  2. B. The current kubeconfig context
  3. C. The Pod liveness probe period only
  4. D. The container image pull policy only

Correct answer

The current kubeconfig context

Objective/domain: Cluster Architecture, Installation, and Configuration (CKA-CAIC-10)

Source: Organizing Cluster Access Using kubeconfig Files

Question 7 A database workload needs stable Pod names, ordered rollout behavior, and durable identity across rescheduling. Which Kubernetes workload controller is the best fit?

Answer choices

  1. A. ClusterRoleBinding
  2. B. StatefulSet
  3. C. IngressClass
  4. D. CronJob

Correct answer

StatefulSet

Objective/domain: Workloads and Scheduling (CKA-WS-03)

Source: StatefulSets

Question 8 A controller Pod will list Pods and update ConfigMaps in one namespace. The administrator wants a dedicated workload identity with only those permissions. What should be configured?

Answer choices

  1. A. A ServiceAccount bound to appropriate RBAC permissions
  2. B. An Ingress path rewrite only
  3. C. A PersistentVolume reclaim policy
  4. D. A container liveness probe

Correct answer

A ServiceAccount bound to appropriate RBAC permissions

Objective/domain: Cluster Architecture, Installation, and Configuration (CKA-CAIC-14)

Source: Service Accounts

Question 9 A log collector must run on every selected worker node, and new matching nodes should receive the collector automatically when they join. What capability is required?

Answer choices

  1. A. Creating a one-time batch completion object only
  2. B. Authorizing users to list Secrets
  3. C. Providing a stable virtual IP for a Service
  4. D. Ensuring a copy of a Pod runs on selected nodes

Correct answer

Ensuring a copy of a Pod runs on selected nodes

Objective/domain: Workloads and Scheduling (CKA-WS-04)

Source: DaemonSet

Question 10 You need an RBAC object that can define permissions at cluster scope rather than only inside one namespace. Which object type provides that scope?

Answer choices

  1. A. A ConfigMap mounted as a file
  2. B. A namespace-scoped Role by itself
  3. C. A PersistentVolumeClaim
  4. D. ClusterRole

Correct answer

ClusterRole

Objective/domain: Cluster Architecture, Installation, and Configuration (CKA-CAIC-12)

Source: Using RBAC Authorization

Where to go after the daily web set

How are CKA questions generated?

dotCreds builds CKA practice questions from public exam objectives and Linux Foundation exam and documentation references. The questions are written for realistic study practice, not copied from exam dumps.

How are explanations sourced?

Each question includes an explanation and, when available, a source link back to the provider documentation or reference used to validate the answer. That keeps the practice tied to study material you can actually review.

What score do I get?

The page tracks today's answered count and accuracy for the 10-question daily set, then saves a 7-day score history on this device so you can see your recent practice trend.

Why use this site?

The site is the fastest way to start CKA practice without installing anything. It is built for daily recall, quick weak-topic discovery, and source-backed explanations you can review immediately.

Why use the app when available?

The web page is the quick daily practice layer. If a dotCreds app is available for CKA, the app is better for larger banks, focused weak-domain drills, longer review sessions, and mobile study routines.