KCNA試験無料問題集（203題）「Linux Foundation Kubernetes and Cloud Native Associate 認定」

出題：1

Which of the following features is NOT a primary benefit of using a service mesh like Istio in a Kubernetes environment?

A. Dynamic traffic routing and fault tolerance capabilities

B. Enhanced observability with metrics, tracing, and logging

C. Simplified service discovery and load balancing across pods

D. Direct access to the underlying Kubernetes API for granular control

E. Improved security through mutual TLS authentication between services

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

You are running a distributed database service in Kubernetes. The database requires secure communication between its pods and external clients. What Kubernetes networking features can you leverage to achieve this?

A. Use a Service of type 'LoadBalancer' with TLS termination.

B. Implement a custom network plugin that enforces encryption for all communication.

C. Configure NetworkPolicies to allow only encrypted traffic from external clients.

D. Enable mutual TLS authentication between database pods and clients.

E. Use a combination of Services, Ingress, and TLS termination to secure external access.

正解：A,D,E 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

Explain the difference between a Docker image and a Docker container. Provide practical scenarios where they are used.

A. Docker images are used for storing data, while containers are used for running applications.

B. Docker images are used for running applications, while containers are used for storing data.

C. Docker images and containers are the same thing, just different names.

D. A Docker image is a blueprint for creating a container, while a container is a running instance of that image.

E. A Docker container is a blueprint for creating an image, while an image is a running instance of that container.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

You are running a resource-intensive application in Kubernetes. You want to reduce costs without impacting performance. Which of the following approaches would be most effective?

A. Implement vertical pod autoscaling to adjust the resource allocation based on actual usage.

B. Reduce the resource requests and limits for the application's pods.

C. Optimize the application code to reduce resource consumption.

D. Migrate the application to a different cloud provider with lower pricing.

E. Decrease the number of replicas for the application's deployment.

正解：A,C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

Your Kubernetes cluster has limited resources, and you need to ensure that the pods for your application are effectively scheduled and managed. Which of the following approaches would contribute to resource optimization?

A. Scheduling all pods with the highest priority to guarantee their resources

B. Disabling resource quotas to allow pods to utilize all available resources

C. Setting resource requests and limits for pods based on their actual resource consumption

D. Deploying all pods on a single node for centralized management

E. Using DaemonSets to ensure that a pod runs on every node in the cluster

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

You are building a web application that needs to serve traffic through a load balancer. Which Kubernetes resource should you use to expose the application service externally?

A. Ingress

B. StatefulSets

C. Deployments

D. Services

E. ConfigMaps

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

Which of the following is NOT a key characteristic of a serverless architecture?

A. Event-driven execution model.

B. Automatic scaling based on workload demand

C. Pre-provisioned and managed servers-

D. Focus on business logic rather than infrastructure management

E. Pay-per-use pricing model.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

You're developing a new microservice for an application running on Kubernetes. The service requires access to a database hosted in a separate Kubernetes cluster. How would you ensure secure communication between your microservice and the database?

A. Use an API gateway to proxy requests between the services.

B. Use a shared secret stored in an environment variable within the microservice pod

C. Set up a VPN connection between the two Kubernetes clusters-

D. Configure a service mesh to handle encryption and authentication between the services.

E. Configure a Kubernetes Ingress resource to route traffic to the database

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：9

You are running a large-scale, microservice-based application in Kubernetes, and you are using HorizontalPodAutoscalers (HPAs) for automatic scaling. Which of the following statements about resource utilization monitoring in this scenario is true?

A. Monitoring resource utilization at the Pod level provides sufficient insights for overall application health and scaling decisions-

B. Monitoring resource utilization at the node level is sufficient for scaling individual microservices.

C. Monitoring resource utilization is only necessary during peak load periods, not during normal operations.

D. It is essential to monitor resource utilization at both the Pod and namespace levels to get a comprehensive view of resource usage and optimize scaling

E. Resource utilization monitoring is not critical in Kubernetes as the system automatically manages resource allocation and scaling.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：10

You are managing a large Kubernetes cluster with multiple namespaces. You want to control access to resources within different namespaces. Which of the following mechanisms can be used to achieve fine-grained access control?

A. Service Accounts

B. Network Segmentation

C. Pod Security Policies

D. Role-Based Access Control (RBAC)

E. Network policies

正解：C,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

KCNA試験無料問題集「Linux Foundation Kubernetes and Cloud Native Associate 認定」