Free practice · No sign-up required
15 questions with answer explanations. Choose an answer below to begin.
Which of the following best describes a container image?
Understand core container concepts and image fundamentals.
0/15 answered · Bookmark questions to review later. Focus the practice area to use keys 1–9 and Enter.
Learn by doing
Use official documentation and hands-on labs to work through topics you missed.
Application examples from the Kubernetes project for practicing manifests and application behavior in a cluster.
Try it: Use a disposable cluster. Read a simple application's manifests, predict which Pods its Service selects, then change a label and use kubectl to diagnose the resulting connectivity problem.
Source is free. A local cluster uses your computer; hosted clusters may incur charges.
Guided tutorials for learning Kubernetes behavior and building practical skills beyond multiple-choice recall.
Try it: Complete a basic application tutorial. Repeat the task without the walkthrough, then explain the difference between declared configuration and observed cluster state.
Documentation is free. Your chosen cluster environment may have costs.
Prefer to read at your own pace? Work through each question below, then open its answer to check your reasoning. You can link directly to a question or print this reference.
Which of the following best describes a container image?
A lightweight, standalone, and executable software package that includes code, runtime, libraries, and settings.
A virtual machine that includes a full operating system.
A hardware abstraction layer provided by the host kernel.
A network protocol for container communication.
Correct answer
A lightweight, standalone, and executable software package that includes code, runtime, libraries, and settings.
A container image packages application code and dependencies into a single artifact that can run consistently across environments. It is not a virtual machine or a network protocol.
What is the primary purpose of a container runtime?
To manage the lifecycle of containers and isolate processes.
To compile source code into executable binaries.
To provide persistent storage for applications.
To define network policies for microservices.
Correct answer
To manage the lifecycle of containers and isolate processes.
A container runtime is responsible for starting, stopping, and isolating containers on a host. It does not handle compilation or persistent storage by itself.
Which statement about Kubernetes namespaces is true?
Namespaces provide scope for resources and help organize cluster objects.
Namespaces isolate resources at the hardware level.
Namespaces are used to encrypt communication between pods.
Namespaces can only contain a single pod.
Correct answer
Namespaces provide scope for resources and help organize cluster objects.
Namespaces partition cluster resources and objects for multiple users or projects. They do not offer hardware isolation or encryption by default.
What does a Kubernetes Deployment primarily manage?
The desired state for pods and ensures specified replicas are running.
Persistent volumes and storage classes.
Network routing between services.
Authentication and role-based access control.
Correct answer
The desired state for pods and ensures specified replicas are running.
A Deployment manages pod replicas and updates, ensuring the cluster matches the declared desired state. It does not manage storage or networking directly.
Which component is responsible for scheduling pods in a Kubernetes cluster?
The kube-scheduler.
The kube-apiserver.
The kubelet.
The container runtime.
Correct answer
The kube-scheduler.
The kube-scheduler assigns newly created pods to nodes based on resource availability and constraints. Other components handle API, node-agent, or runtime tasks.
What is a common use case for a ConfigMap?
To inject configuration data such as environment variables or configuration files into pods.
To store sensitive credentials securely.
To define persistent storage volumes.
To manage network ingress rules.
Correct answer
To inject configuration data such as environment variables or configuration files into pods.
ConfigMaps hold non-confidential configuration data that applications can consume. Secrets are used for sensitive data, not ConfigMaps.
Which practice aligns with the principles of immutable infrastructure?
Updating existing running containers with new code instead of replacing them.
Rebuilding and replacing containers to deploy changes.
Storing application state directly on the container filesystem.
Sharing writable layers between containers.
Correct answer
Rebuilding and replacing containers to deploy changes.
Immutable infrastructure treats deployed instances as ephemeral and replaces them for updates rather than modifying them in place.
What is the role of a service in Kubernetes?
To provide a stable endpoint for accessing a set of pods.
To build container images from source code.
To manage node-level resource allocation.
To define cluster-wide security policies.
Correct answer
To provide a stable endpoint for accessing a set of pods.
A service abstracts access to pods and provides a consistent network endpoint, typically via a stable IP and DNS name.
Which of the following is a benefit of declarative configuration?
You describe the desired state and the system works to achieve it automatically.
It requires manual intervention for every change.
It only works with imperative command-line tools.
It eliminates the need for version control.
Correct answer
You describe the desired state and the system works to achieve it automatically.
Declarative configuration allows users to specify the desired outcome, enabling automation and consistency. It is well-suited for infrastructure management.
What does a pod typically contain?
One or more containers that share storage and network resources.
Multiple nodes from different clusters.
A complete operating system image.
A persistent database instance.
Correct answer
One or more containers that share storage and network resources.
A pod is the smallest deployable unit in Kubernetes and can host one or more tightly coupled containers sharing network and storage.
Which tool is commonly used for defining and applying Kubernetes manifests?
kubectl apply
docker build
helm package
kubelet status
Correct answer
kubectl apply
kubectl apply is used to create or update resources defined in YAML manifests. Other tools serve different purposes such as building images or managing releases.
What is a key characteristic of a sidecar container pattern?
It runs alongside a primary container to extend its functionality.
It replaces the main container at runtime.
It only runs during cluster initialization.
It isolates the main container from the network entirely.
Correct answer
It runs alongside a primary container to extend its functionality.
A sidecar container augments the primary container by providing logging, monitoring, or networking features without changing the main application.
Which practice helps ensure high availability in a cluster?
Distributing replicas across multiple nodes and zones.
Running all workloads on a single node.
Using only one control plane instance.
Disabling automated backups.
Correct answer
Distributing replicas across multiple nodes and zones.
High availability is improved by spreading replicas and control plane components across failure domains such as nodes and zones.
What is the purpose of health checks in containerized applications?
To determine if a container is running correctly and ready to serve traffic.
To measure network latency between containers.
To encrypt data at rest.
To compile application code during runtime.
Correct answer
To determine if a container is running correctly and ready to serve traffic.
Health checks allow orchestrators to monitor container status and restart or route traffic based on readiness and liveness.
Which statement best describes infrastructure as code?
Managing infrastructure through version-controlled configuration files.
Manually configuring servers via graphical consoles.
Using physical documentation to guide deployments.
Storing infrastructure definitions in spreadsheets.
Correct answer
Managing infrastructure through version-controlled configuration files.
Infrastructure as code treats infrastructure definitions as software, enabling reproducibility and change tracking through version control.
Recall the answer before opening each card.
A lightweight, standalone, executable package that includes code, runtime, libraries, and settings for consistent execution across environments.
To manage the lifecycle of containers and isolate processes on a host, enabling starting, stopping, and resource isolation.
Namespaces provide scope for resources, allowing multiple users or projects to coexist in a cluster without resource name conflicts.
It manages the desired state for pods, ensuring the specified number of replicas are running and handling rolling updates.
The kube-scheduler assigns newly created pods to nodes based on resource availability, constraints, and policies.
Injecting non-sensitive configuration data such as environment variables or configuration files into pods at runtime.
Rebuilding and replacing containers to deploy changes, rather than modifying them in place, preserves consistency and reliability.
To provide a stable endpoint (IP and DNS name) for accessing a set of pods, abstracting pod IP changes.
Users describe the desired state, and the system automatically works to achieve and maintain that state, enabling automation and consistency.
One or more tightly coupled containers that share storage volumes, network resources, and a specification for how to run them.
kubectl apply creates or updates resources in a cluster based on YAML or JSON manifests.
It runs alongside a primary container to extend functionality (e.g., logging, monitoring) without altering the main application.
By spreading replicas across multiple nodes and zones, failure of one node or zone does not cause total service outage.
To determine if a container is running correctly (liveness) and ready to serve traffic (readiness), enabling automatic recovery and traffic routing.
Managing and provisioning infrastructure through version-controlled, machine-readable definition files, enabling reproducibility and change tracking.
A container runtime runs containers on the host kernel, while a hypervisor creates and manages virtual machines with separate OS instances.
A pod, which can house one or more containers with shared network and storage, is the atomic unit of scheduling.
kubectl apply sends the manifest to the API server; the system reconciles the current state to the desired state through controllers.
Immutable infrastructure ensures the deployment environment remains consistent and avoids configuration drift, making updates and rollbacks safer.
They indicate whether a pod is ready to accept traffic; if not, the Service removes it from endpoints, preventing service disruption.
Read the prompt, commit to an answer, then flip the card. Move through the deck at your own pace and repeat any topic that does not come back quickly.
Card 1 of 20
1 reviewed this session
Connect the concepts
Open a branch to connect a topic with its practice questions and explanations. Use the map to choose your next review topic.
This is an analysis of the practice bank, not a claim about the vendor's live exam blueprint. Use it to identify the knowledge, judgment, and recall patterns exercised here, then verify your coverage against the current official exam guide.
This section covers the foundational concepts of containerization. A container image is a lightweight, standalone package containing code and all dependencies. The container runtime manages the lifecycle and isolation of containers. Understanding these basics is critical for platform engineering because they underpin all orchestration and deployment decisions. The practice bank emphasizes the difference between containers and virtual machines and the role of the runtime in process isolation.
Namespaces provide scope for resources, helping organize multi-tenant clusters. Deployments manage pod replicas and updates declaratively. The kube-scheduler assigns pods to nodes. Services provide stable endpoints for accessing pods. ConfigMaps inject configuration data. Pods are the smallest deployable units. The practice bank tests the ability to select the right resource for a given purpose and understand how they interact.
Declarative configuration lets you define desired state, and the system reconciles to it. Immutable infrastructure replaces instances rather than modifying them in place. Infrastructure as code manages infrastructure via version-controlled config files. The practice bank tests these principles through questions on kubectl apply, ConfigMaps, and the sidecar pattern. These practices enable reproducibility, automation, and resilience in platform engineering.
High availability is achieved by distributing replicas across nodes and zones. Health checks (liveness and readiness probes) determine if containers are operating correctly and ready to serve traffic. The sidecar pattern extends primary container functionality without modifying the application. The practice bank verifies understanding of these resilience patterns, which are essential for building robust cloud native systems.
Study workflow
Review the definition of a container image and its distinction from a virtual machine. Understand the role of the container runtime. Practice identifying which component handles process isolation versus networking or storage.
Familiarize yourself with Pod, Service, Deployment, Namespace, ConfigMap, and Secret. Use kubectl explain for each resource. Understand how they relate and when to use each. Focus on the purpose of each resource as per the practice bank.
Write YAML manifests for a typical application: Deployment with replicas and labels, Service with selector, and ConfigMap for environment variables. Apply with kubectl apply and observe desired state reconciliation. Compare with imperative commands to solidify the concept.
Understand why rebuilding and replacing containers is preferred over patching. Explore the sidecar pattern by deploying a simple application alongside a logging sidecar. Test how to update applications by rolling out new versions via Deployment updates.
Add liveness and readiness probes to a Deployment manifest. Experiment with multi-node clusters to distribute replicas. Verify that Kubernetes restarts unhealthy pods and routes traffic only to ready pods. Relate these practices to high availability.
FAQ
Clear boundaries on what the bank covers, how to use it, and where official vendor information still matters.
Containers share the host OS kernel and are lightweight, starting in seconds. Virtual machines include a full OS and hypervisor, making them heavier but offering stronger isolation. Container runtimes manage process isolation without hardware emulation.
Use ConfigMap for non-sensitive configuration data like environment variables or config files. Use Secret for sensitive data such as passwords or API keys, as Secrets are base64-encoded and can be encrypted at rest. Both inject data into pods.
The kube-scheduler considers resource requirements (CPU, memory), node constraints (taints, tolerations), affinity rules, and data locality. It selects a node that can satisfy the pod's resource needs and policies, then updates the API server with the binding.
Immutable infrastructure treats servers and containers as disposable. Changes are made by replacing entire instances rather than modifying existing ones. This eliminates configuration drift, simplifies rollbacks, and improves consistency across environments.
Health checks allow the orchestrator to detect when a container is unresponsive or not ready to serve traffic. Liveness probes restart deadlocked containers; readiness probes control traffic routing. This ensures high availability and self-healing of applications.
Browse another free bank or use the study strategy guide to turn your misses into spaced review.
