CKA — Practice Questions
Introduction Practice Questions
Test your understanding of CKA fundamentals before diving into the technical chapters. These questions cover exam format, kubectl skills, and preparation basics.
Scoring Guide:
- 9–10 correct: Ready to proceed to technical chapters
- 7–8 correct: Good foundation, review any gaps
- Below 7: Re-read the introduction topics before continuing
Q1: What is the CKA passing score and which domain carries the highest weight?
Show Answer
The passing score is 66%. The Troubleshooting domain carries the highest weight at 30% — nearly a third of the total score.
This means you could pass the exam by excelling at troubleshooting (30%) plus one other domain. Conversely, failing at troubleshooting makes passing very difficult.
Q2: Write the command to create a Pod named test-pod using the busybox image and output the YAML without creating the resource.
Show Answer
kubectl run test-pod --image=busybox --dry-run=client -o yaml
Using the alias and export shortcut:
k run test-pod --image=busybox $do
The --dry-run=client -o yaml combination generates the resource manifest without creating it. This is the fastest way to scaffold YAML during the exam.
Q3: How do you switch to a context named cluster2 and set the default namespace to kube-system?
Show Answer
kubectl config use-context cluster2
kubectl config set-context --current --namespace=kube-system
Verify:
kubectl config current-context
kubectl config view --minify | grep namespace
Always switch context before starting any question. Each CKA question tells you which context to use.
Q4: Name three key differences between CKA and CKAD.
Show Answer
- CKA includes kubeadm cluster setup — CKAD does not test cluster installation or configuration
- CKA includes etcd backup and restore — This is exclusive to the CKA exam
- CKA focuses on troubleshooting (30% weight) — CKAD’s troubleshooting coverage is minimal
Other differences: CKA tests node-level troubleshooting, cluster upgrades, deeper RBAC management, and system-level debugging (journalctl, crictl). CKAD focuses more on multi-container Pods, Jobs/CronJobs, Helm, and application deployment patterns.
Q5: Create a Deployment named api-server with 3 replicas using the nginx:1.27 image, then expose it as a NodePort Service on port 80.
Show Answer
kubectl create deployment api-server --image=nginx:1.27 --replicas=3
kubectl expose deployment api-server --port=80 --target-port=80 --type=NodePort
Verify:
kubectl get deployment api-server
kubectl get svc api-server
kubectl get pods -l app=api-server
This two-command approach is faster than writing YAML. The imperative create and expose commands handle the selector matching automatically.
Q6: What are the three Kubernetes certifications offered by CNCF, and which one requires a prerequisite?
Show Answer
- CKA — Certified Kubernetes Administrator (no prerequisite)
- CKAD — Certified Kubernetes Application Developer (no prerequisite)
- CKS — Certified Kubernetes Security Specialist (requires valid CKA certification)
CKS is the only certification that requires a prerequisite. You must hold a valid (non-expired) CKA before you can take the CKS exam.
Q7: You need to delete a Pod named stuck-pod immediately without waiting for graceful shutdown. Write the command.
Show Answer
kubectl delete pod stuck-pod --force --grace-period=0
Using the alias and export shortcut:
k delete pod stuck-pod $now
The --force --grace-period=0 flags bypass the default 30-second graceful termination period. Use this during the exam when you need to quickly recreate a Pod.
Q8: Which tools are pre-installed in the CKA exam terminal? Name at least 5.
Show Answer
Pre-installed tools include:
- kubectl — Kubernetes CLI
- kubeadm — Cluster lifecycle management
- etcdctl — etcd operations
- crictl — Container runtime inspection
- journalctl — System service logs
- systemctl — Service management
- vim / vi — Text editors
- tmux — Terminal multiplexer
- curl / wget — HTTP utilities
- jq — JSON processor
Knowing these tools exist and when to use each one is important for exam efficiency.
Q9: Write a kubectl command to check whether the user dev-user can create Pods in the testing namespace.
Show Answer
kubectl auth can-i create pods --as=dev-user -n testing
Expected output: yes or no
The --as flag impersonates another user. This is how you test RBAC permissions during the exam without switching user accounts.
Q10: Describe the recommended 3-pass time management strategy for the CKA exam.
Show Answer
Pass 1 — Quick Wins (First 40 minutes): Scan all questions and complete easy ones (simple resource creation, commands you know) in under 3 minutes each. Target: 8–10 questions.
Pass 2 — Medium Tasks (Next 50 minutes): Return to medium-difficulty questions requiring multi-step solutions. Allocate 5–7 minutes per task. Skip if stuck after 5 minutes. Target: 5–7 questions.
Pass 3 — Hard Tasks (Final 30 minutes): Tackle complex troubleshooting and multi-component problems. Attempt partial answers for partial credit. Use the last 5 minutes to review flagged questions.
This strategy ensures you capture all easy points first, preventing time lost on hard questions early in the exam.
