KCNA 試験問題を無料オンラインアクセス

How does cert-manager integrate with Kubernetes resources to provide TLS certificates for an application?

• A.It updates kube-proxy configuration to ensure encrypted traffic between Services.
• B.It replaces default Kubernetes API certificates with those from external authorities.
• C.It injects TLS certificates directly into Pods when the workloads are deployed.
• D.It manages Certificate resources and Secrets that can be used by Ingress objects for TLS.

A site reliability engineer needs to temporarily prevent new Pods from being scheduled on node-2 while keeping the existing workloads running without disruption. Which kubectl command should be used?

• A.kubectl pause deployment
• B.kubectl cordon node-2
• C.kubectl delete node-2
• D.kubectl drain node-2

Which statement about the Kubernetes network model is correct?

• A.Pods can only communicate with Pods exposed via a Service.
• B.The Service IP is used for the communication between Services.
• C.Pods can communicate with all Pods without NAT.
• D.The Pod IP is only visible inside a Pod.

What default level of protection is applied to the data in Secrets in the Kubernetes API?

• A.The values are stored in plain text
• B.The values use AES symmetric encryption
• C.The values are encoded with SHA256 hashes
• D.The values are base64 encoded

Kubernetes ___ protect you against voluntary interruptions (such as deleting Pods, draining nodes) to run applications in a highly available manner.

• A.Pod Topology Spread Constraints
• B.Pod Disruption Budgets
• C.Resource Limits and Requests
• D.Taints and Tolerations