KCNA — Container Orchestration
Chapter 4 — Container Orchestration
This chapter covers the Container Orchestration domain — the second-largest KCNA exam domain at 22% weight. It focuses on containers, runtimes, networking, service mesh, storage, and security fundamentals.
What You’ll Learn
| # | Topic | What You’ll Understand |
|---|---|---|
| 1 | Containers vs VMs | How containers differ from virtual machines |
| 2 | Container Runtimes | Docker, containerd, CRI-O, and the OCI standard |
| 3 | Container Networking | How containers communicate |
| 4 | Service Mesh Basics | Istio, Linkerd, and sidecar proxies |
| 5 | Container Storage | Volumes, PVs, PVCs, and CSI |
| 6 | Container Security Basics | Image security, runtime security, and best practices |
| 7 | Practice Questions | Test your knowledge (10 MCQs) |
Why This Chapter Matters
Container Orchestration is the second-biggest domain. The exam tests your understanding of:
| Concept | Exam Relevance |
|---|---|
| Containers vs VMs | Fundamental understanding of containerization |
| Container runtimes | containerd, CRI-O, OCI standards |
| Container networking | CNI, overlay networks |
| Service mesh | Sidecar pattern, Istio, Envoy |
| Storage | Persistent volumes, storage classes, CSI |
| Security | Image scanning, RBAC, security contexts |
