Workloads & Scheduling
CKA · 45 questions
- A city CMS Deployment must bump its container image while the citizen portal keeps answering requests. Which update behavior should the platform team rely on?
- A county GIS rollout introduced bad tiles after an image change. Ops need to restore the previous ReplicaSet revision quickly. Which action matches that goal?
- A library catalog Deployment must stay available to citizens during an update. Which rollingUpdate setting directly limits how many Pods may be down at once?
- Transit ops must confirm a schedule API Deployment finished updating before announcing the new version. Which kubectl workflow best observes that progress?
- A school district public portal briefly went dark during an image change because every Pod was terminated before new ones started. Which Deployment strategy causes that downtime pattern?
- Public-health sees error spikes mid-rollout on a vaccination-status API and must stop further Pod replacements without undoing what already shipped. Which Deployment control fits?
- A building-permits platform wants a controlled image bump through the Deployment controller. Which change correctly triggers a new rollout?
- An open-data portal engineer asks whether patching a live Pod's image by hand is the supported way to roll a new release under a Deployment. What should the admin answer?
- Municipal SRE needs to see which Deployment revisions and images shipped last week for audit. Which kubectl view is purpose-built for that?
- A city permits API needs non-sensitive feature flags injected as environment variables. Which object is the appropriate store for that configuration?
- A county database password must be supplied to Pods as mounted files rather than plain ConfigMap data. Which Kubernetes object type is intended for that confidential material?
- A library updates keys in a ConfigMap used as environment variables by catalog Pods. What should ops expect about those running Pods?
- Transit mounts a TLS key pair into a gateway Pod from cluster-managed confidential data. Which approach matches common CKA practice?
- A school district discovers API tokens stored in a ConfigMap that was committed to git. What correction aligns with Kubernetes configuration practice?
- Public-health wants every key from a ConfigMap loaded as environment variables on a stats API Pod without listing each key. Which consumption pattern does that?
- A building-permits app needs public endpoint URLs and database credentials in the same Pod. How should those settings typically be split?
- An open-data portal needs an opaque Secret from literal values in a demo Namespace so the app is not baked with passwords in the image. What is the admin's responsibility?
- A municipal HR app's Pods fail to start because the Deployment references a ConfigMap name that does not exist in the Namespace. What does that illustrate?
- A city 311 API spikes at lunch and should gain Pods when CPU is high. Which control plane object scales Deployment replicas from resource metrics like CPU?
- County analytics must keep HPA from scaling a batch API below a floor or above a cost ceiling. Which HPA fields constrain that range?
- A library HPA targeting CPU utilization never changes replica counts. Investigation shows resource metrics are unavailable. What dependency is typically missing?
- Transit sets an HPA CPU utilization target on a schedules API, but utilization percentages are meaningless without a baseline. What must Pods define for those targets to work?
- A school district attaches HPA to a gradebook Deployment. What operational practice avoids fighting the autoscaler?
- Public-health expects a known parade-day surge at 09:00 and asks whether only waiting for HPA is always enough. Which statement is accurate?
- A building-permits platform sees Pod counts thrash up and down under bursty traffic while HPA is enabled. What scale-down awareness should admins apply?
- An open-data portal team sees CPU-bound app pods and wants the Horizontal Pod Autoscaler to fix capacity. What does HPA actually change?
- During an incident, a municipal SRE needs to confirm whether an HPA has raised desired replicas and what its current status reports. Which approach best answers that?
- A city website Pod managed by a Deployment crashes and disappears from the node. What should restore the desired replica count?
- A county GIS team wants pods that are still warming up to stay off Service traffic until they can serve requests. Which probe controls that behavior?
- A library catalog container is still marked Running but has stopped answering requests after a deadlock. Which probe is designed to restart that wedged process?
- A transit agency runs long-lived API Pods under a Deployment and needs failed containers to restart automatically. Which restartPolicy is correct for those Deployment-managed Pods?
- After a school district rolls a bad image, Pods repeatedly fail to start and show CrashLoopBackOff. What does that status primarily indicate?
- A public-health dashboard must survive losing a single worker node that hosted one of its Pods. Which design choice most directly improves that resilience?
- A building-permits JVM app takes minutes to initialize and would fail early liveness checks. Which probe gives it time before liveness restarts begin?
- An engineer deletes an unmanaged (naked) Pod that served an open-data API. What happens compared with deleting a Pod owned by a Deployment?
- A municipal app is 'not healthy': some Pods never leave Pending while others CrashLoopBackOff. What should the admin conclude about self-healing controllers?
- City GPU GIS Pods must run only on workers labeled for GPUs. Which scheduling mechanism most directly constrains them to those nodes?
- A county app occasionally leaks memory and risks starving other workloads on the same node. Which container setting caps that usage?
- Library catalog Pods should prefer SSD-backed nodes when available but still schedule elsewhere if needed. Which construct expresses that soft preference?
- Transit taints dedicated ingestion nodes so ordinary apps stay off them, while ETL Pods may still schedule there. What must those ETL Pods include?
- School-district Pods without CPU requests share nodes with heavy batch jobs and suffer throttling. What do CPU requests primarily influence in this situation?
- Public-health students deploy apps without resource fields. How can the namespace automatically supply default container CPU and memory at admission?
- Building-permits engineers cannot create new Pods because the namespace CPU budget is exhausted. Which object enforces that namespace-level ceiling at admission?
- An open-data portal wants Deployment replicas to avoid co-locating on the same host for higher availability. Which scheduling feature helps spread those Pods?
- Under node resource contention, how does a higher PriorityClass typically affect scheduling for a municipal critical Pod versus lower-priority Pods?