Find a practice exam
Flexible search understands AI-901, ai901, ai 901, 901, ai, network plus, and saa c03.
No matching practice exams yet.
Free CKA practice test
Know why every answer is right or wrong.
What CKA covers: Cluster Architecture, Installation, and Configuration (28%) • Troubleshooting (27%) • Services and Networking (19%)
New set every day. Start today's questions before they rotate.
CKA
Certified Kubernetes Administrator
What you get immediately
- A real CKA question first, not a wall of copy
- Correct answer plus per-choice explanation
- Source link for follow-up study
- Free daily set, then full-bank Pro when you want more
A Pod should be allowed onto a node with a matching NoSchedule taint. What must the Pod include?
A. Incorrect: It does not affect scheduling decisions.
B. Incorrect: A LoadBalancer Service has no impact on Pod placement.
C. Correct: A matching toleration allows the Pod to schedule onto a node with a corresponding taint.
D. Incorrect: It is irrelevant to taint and toleration mechanisms.
Which Kubernetes component is responsible for managing the lifecycle of Service Accounts within a cluster?
A. Correct: Controller manager because it runs controllers that watch for changes in the state of Service Accounts and ensures they are consistent with their desired state.
B. Incorrect: Scheduler because it is responsible for assigning pods to nodes, not managing Service Account lifecycle.
C. Incorrect: Etcd because it stores cluster data but does not manage the lifecycle of objects like Service Accounts.
D. Incorrect: Kubelet because it runs on each node and manages containers, not Service Account lifecycle.
Two containers in the same Pod need temporary shared scratch space. Which volume type could fit?
A. Incorrect: It is used for defining an ingress resource to manage external access to the services in a cluster, not for providing temporary shared storage.
B. Correct: EmptyDir provides a temporary shared storage volume that is specific to each Pod and can be used by multiple containers within the same Pod.
C. Incorrect: It is part of Kubernetes RBAC (Role-Based Access Control) and defines a set of permissions, not for providing storage.
D. Incorrect: It is used in Service discovery for Services with type ExternalName or LoadBalancer, not for temporary shared storage.
You're 3 questions in. Want the full bank?
Unlock the full question set, timed exam mode, practice mode, saved progress, previous tests, and readiness scoring.
145 more questions, timed exam mode, and saved history are waiting in the full unlock.
Pro is active. Use the full bank, Exam mode, and saved box scores when you want deeper review.
If the Kubernetes API server is unavailable, what becomes unavailable for normal kubectl operations?
A. Incorrect: It refers to a specific field in images, which is unrelated to kubectl operations.
B. Incorrect: An application log line pertains to application-level issues, not Kubernetes API availability.
C. Correct: The central Kubernetes API endpoint is essential for kubectl to manage cluster objects and perform operations.
D. Incorrect: It concerns Pod storage, which operates independently of the API server's availability.
A StatefulSet needs stable DNS entries for individual Pods. Which Service pattern is commonly paired with it?
A. Correct: A headless Service provides stable DNS entries for individual Pods in StatefulSets.
B. Incorrect: Namespace quota with no selectors does not affect Pod networking.
C. Incorrect: LoadBalancer Services are used for external access, not internal StatefulSet communication.
D. Incorrect: ClusterRoleBindings manage permissions, not network identities.
What does a Deployment manage in Kubernetes?
A. Incorrect: Deployments do not manage user certificates.
B. Incorrect: Deployments do not handle PersistentVolume reclaim policies.
C. Correct: Deployments manage ReplicaSets and rolling updates for stateless application Pods.
D. Incorrect: Deployments do not control external DNS zones.
What is etcd used for in a Kubernetes cluster?
A. Incorrect: It refers to the function of the Kubernetes scheduler, which assigns pods to nodes.
B. Correct: Etcd stores cluster data as a consistent key-value store for reliable access and management.
C. Incorrect: DNS resolution in Kubernetes is handled by CoreDNS or similar services, not etcd.
D. Incorrect: Service traffic proxying is managed by the Kubernetes API server and kube-proxy.
What must be true for a PVC to be expanded using Kubernetes volume expansion?
A. Incorrect: Every Pod in the cluster being privileged has no direct impact on PVC expansion.
B. Incorrect: A headless Service is not required for PVC expansion to work.
C. Incorrect: All RoleBindings being cluster-scoped does not affect whether a PVC can be expanded.
D. Correct: The StorageClass and volume plugin must support expansion for it to be possible.
If a Service has no endpoints, what should be checked?
A. Correct: Services route to endpoints derived from matching Pods.
B. Incorrect: Running kubeadm init twice on a worker has no direct relation to Service endpoints.
C. Incorrect: The PVC access mode does not affect Service routing or endpoints.
D. Incorrect: An unrelated RBAC Role does not impact how Services route traffic.
A cloud-backed cluster should expose an app through a provider-managed external load balancer. Which Service type is designed for that?
A. Incorrect: RoleBinding is used for granting permissions to users and service accounts.
B. Incorrect: It is a controller that runs one-off tasks to completion.
C. Correct: LoadBalancer Services request provider load balancer integration, which is needed for exposing an app in a cloud-backed cluster.
D. Incorrect: It is used for storing non-sensitive configuration data.
You've reached the free preview.
Go beyond sample questions with the full source-backed bank, objective practice, exam mode, saved progress, and readiness scoring.
155 verified questions are ready behind the full unlock.
Pro is active. Use the full bank, readiness score, and saved exams when you want deeper reps.
Unlock the full CKA bank.
Get the full source-backed bank, timed exam mode, practice mode, saved progress, previous tests, and readiness scoring for this exam.
You've answered 0/10 free questions today.
Locked: 145 more questions in the full bank.
Locked: exam simulation mode and end-of-exam review.
Today's free set refreshes soon. Upgrade to continue with the full bank.
Unlock this exam, or compare the career path and bundle options when you want a broader guided route.
Build a CKA session
Choose the question count, question set, mode, and timer for your full-bank practice.
Tell dotCreds what you are aiming for.
Set a target once. We will keep the next study action visible before every Pro session.
Answer more questions to start your readiness trend on this browser.
Box scores, domain breakdowns, and full answer explanations for Pro exam attempts on this browser.
7-day score keeper
Answer questions today and this will become a rolling 7-day scorecard.
Keep today’s practice moving
Guest progress saves automatically on this device. Add an email later when you want a magic link that keeps your daily CKA practice in sync across browsers.
Guest progress saves on this device automatically
155 verified questions are currently in the live bank. Questions updated at May 13, 2026, 2:47 AM CDT. The daily set rotates at 10:00 AM local time, and each explanation links back to the source used to write it. Use the web set for quick practice, then switch to the app when available for larger banks and deeper review.
CKA is aimed at operational Kubernetes roles where cluster administration, troubleshooting, and workload management show up in the real job.
- Role examples: platform engineer, site reliability engineer, Kubernetes administrator, and DevOps engineer.
- Where it shows up: container orchestration, platform operations, Kubernetes administration, and cloud-native infrastructure.
- On-the-job payoff: the work is hands-on with clusters, workloads, scheduling, storage, and networking inside Kubernetes.
- Typical next step: It pairs naturally with Linux, Terraform, and cloud architecture paths.
CKA usually rewards systems thinking: what breaks operationally, what control fixes it, and what workflow leaves the environment in a cleaner state.
- Current emphasis in this bank: Cluster Architecture, Installation, and Configuration (28%).
- A lot of misses come from recognizing the right technology family but choosing the wrong command, state model, or operational sequence.
- Best official starting point: Linux Foundation CKA certification.
The fastest path is to turn this exam into a repeatable pattern-recognition loop instead of a one-time cram session.
- Start with the free daily set closed-book so you can see which parts of the cloud and it lane still feel weak.
- Use every explanation as a checkpoint for why the right answer fits the scenario and why the other answer choices do not.
- Open the official Linux Foundation source when a concept keeps missing so you fix the gap at the source instead of rereading generic notes.
- Use the nearby cert pages when you need broader context around the same job path or technology stack.
The usual misses happen when learners recognize keywords but do not slow down enough to match the scenario to the exact decision the exam is testing.
- Reading for one familiar keyword and skipping the deeper clue that tells you which cloud and it concept actually fits.
- Memorizing isolated terms without checking why the right answer wins over the other answer choices in the same scenario.
- Ignoring the official Linux Foundation source after a miss and hoping the next question will feel easier on its own.
- Studying this page in isolation when one nearby cert page could clear up the broader pattern much faster.
The fastest path is simple: answer the set, review the reasoning, then use the score history and source links to decide what to hit next.
- Answer the free set first without looking anything up so the score reflects what is actually sticking.
- Read every explanation, especially the wrong answer choices, so the weaker options stop looking plausible next time.
- Open the linked source when a concept feels weak, then come back and repeat the question flow while the wording is fresh.
- Use the 7-day score keeper, related cert links, and comparison pages to decide what to study next instead of guessing.
- Move into Pro when you want the full bank, timed reps, readiness tracking, and previous-test review.
Use these official Linux Foundation resources alongside the daily practice set. They cover the provider's own exam page, study guide, or prep material.
Need adjacent Linux Foundation practice pages too? Linux Foundation practice hub.
How are CKA questions generated?
dotCreds builds CKA practice questions from Linux Foundation documentation and source-backed references, with official or primary sources preferred first. The questions are written for realistic study practice, not copied from exam dumps.
How are explanations sourced?
Each question includes a source-backed explanation and a link to the documentation or reference used to validate the answer. If an official page is too broad, dotCreds uses a reputable answer-level reference instead of pretending a generic page proves the answer.
What score do I get?
The page tracks today's answered count and accuracy for the 10-question daily set, then saves a 7-day score history on this device so you can see your recent practice trend.
Why use this site?
The site is the fastest way to start CKA practice without installing anything. It is built for daily recall, quick weak-topic discovery, and source-backed explanations you can review immediately.
Why use the app when available?
The web page is the quick free sampler. If a dotCreds app is available for CKA, the app is better for larger banks, focused weak-domain drills, longer review sessions, and mobile study routines.