[2024年更新]無料C_KYMD_01試験問題集はパス試験は超簡単
C_KYMD_01試験問題集でC_KYMD_01練習テスト問題
質問 # 35
Which of the following are features of Kubernetes? Note: There are 3 correct Answers to this question.
- A. Storage orchestration
- B. Hardware virtualization
- C. Operating system management
- D. Immutability and self-healing
- E. Service Discovery and load balancing
正解：A、D、E
質問 # 36
For which workload requirements would you use StatefulSet? Note: There are 3 correct Answers to this question.
- A. Ordered network identifiers
- B. Ordered, graceful deployment and scaling
- C. Ordered, persistent storage
- D. Stable, unique network identifiers
- E. Stable, persistent storage
正解：B、D、E
質問 # 37
In which order are pods created when a StatefulSet is set up?
- A. Sequential
- B. Consecutive
- C. Chronological
正解：A
質問 # 38
For which workload requirements would you use StatefulSet? Note: There are 3 correct Answers to this question.
- A. Ordered network identifiers
- B. Ordered, graceful deployment and scaling
- C. Ordered, persistent storage
- D. Stable, unique network identifiers
- E. Stable, persistent storage
正解：B、D、E
解説：
Explanation
A StatefulSet is a workload type that runs one or more pods that maintain a stable identity and persistent storage1. StatefulSets are suitable for applications that require one or more of the following2:
Ordered, graceful deployment and scaling: StatefulSets ensure that pods are created and deleted in a sequential, ordered manner. Pods are assigned ordinal numbers that reflect their order in the set. Pods are scaled in reverse order of creation. StatefulSets also respect pod disruption budgets to limit the number of pods that are down simultaneously.
Stable, persistent storage: StatefulSets use PersistentVolumeClaims to provide each pod with its own persistent storage. The PersistentVolumeClaim of a pod is not deleted when the pod is deleted, which preserves the state of the application across pod rescheduling.
Stable, unique network identifiers: StatefulSets use a headless service to provide each pod with a unique network identity. Pods have a stable hostname based on their ordinal number and the name of the StatefulSet. Pods can use this hostname to communicate with each other and access their own or other pods' data.
References
1(https://kubernetes.io/docs/concepts/workloads/controllers/statefulset/), 2(https://kubernetes.io/docs/tutorials/s
質問 # 39
What does a service mesh in Kyma typically consist of? Note: There are 2 correct Answers to this question.
- A. Data plane
- B. Master node
- C. Worker node
- D. Control plane
正解：A、D
解説：
Explanation
A service mesh in Kyma typically consists of two components: the data plane and the control plane12. The data plane is responsible for handling the communication between the microservices in the cluster. It consists of a set of sidecar proxies (Envoy) that are injected into each pod and intercept the traffic. The control plane is responsible for managing the configuration and policies of the data plane. It consists of a set of components (Istio) that provide features like service discovery, security, traffic management, observability, and more12. References: Discovering the Service Mesh, SAP BTP - KYMA - SERVICE MESH | SAP Blogs
質問 # 40
Which of the following open-source projects does SAP BTP, Kyma runtime use to expose and analyze in-cluster telemetry data? Note: There are 3 correct Answers to this question.
- A. Vector
- B. Prometheus
- C. Opstrace
- D. Loki
- E. Crafana
正解：B、D、E
質問 # 41
What is the etcd component in a Kubernetes cluster?
- A. API to manage the cluster
- B. Key value store that stores the cluster state and configuration
- C. Storage to back up deployed applications
- D. Relational database to store cluster configuration
正解：B
解説：
Explanation
The API server is a component of the Kubernetes control plane that exposes the Kubernetes API. The API server is the front end for the Kubernetes control plane. The main implementation of a Kubernetes API server is kube-apiserver . kube-apiserver is designed to scale horizontally-that is, it scales by deploying more instances. You can run several instances of kube-apiserver and balance traffic between those instances. etcd Consistent and highly-available key value store used as Kubernetes' backing store for all clusterdata. If your Kubernetes cluster uses etcd as its backing store, make sure you have a back up plan for the data2.
You use etcd in Kubernetes as a backend for service delivery. It is one of the master components used for cluster management. You can run etcd in an external cluster or as a pod on your Kubernetes master. If you run it as an external cluster you can benefit from an extra layer of security and resiliency due to its isolation from the master3.
References:
Operating etcd clusters for Kubernetes
Kubernetes Components
What Is etcd and How Is it Used in Kubernetes?
質問 # 42
What is a characteristic of Kubernetes pods managed by deployments?
- A. They have a stable name.
- B. They are assigned a random hash suffix as part of their name.
- C. They are stateful.
正解：B
解説：
Explanation
Kubernetes pods are the smallest and most basic unit of an application in Kubernetes. They are ephemeral and can be created and destroyed at any time. Pods managed by deployments are not meant to be accessed directly, but rather through services that provide load balancing and service discovery. To ensure that pods managed by deployments are unique and identifiable, they are assigned a random hash suffix as part oftheir name. For example, a pod named nginx-deployment-6dd86d77d-ztqvs belongs to a deployment named nginx-deployment and has a hash suffix of 6dd86d77d-ztqvs12. References: Deployments | Kubernetes, Kubernetes Administrator: Managing Pods & Deployments
質問 # 43
What is the secret and configuration management feature in Kyma?
- A. A credential store and manager
- B. A configuration assistant
- C. A local password manager
- D. An object store
正解：A
質問 # 44
Which of the following observability tools are available in SAP BTP, Kyma runtime? Note: There are 2 correct Answers to this question.
- A. Kiali
- B. Loki
- C. Jaeger
- D. Crafana
正解：B、C
解説：
Explanation
SAP BTP, Kyma runtime provides a vendor-neutral integration point for traces, metrics, and logs, mainly using the OpenTelemetry Protocol (OTLP). For this option, the system you want to connect must support OTLP natively. The observability tools that support OTLP are Loki and Jaeger. Loki is a horizontally-scalable, highly-available, multi-tenant log aggregation system inspired by Prometheus. Jaeger is a distributed tracing system that monitors and troubleshoots transactions in complex distributed systems. Kiali and Grafana are not part of the observability architecture of SAP BTP, Kyma runtime, but they can be installed separately if needed. References: From Observability to Telemetry - a strategy shift in SAP BTP, Kyma Runtime, Accessing the built-in observability tools of Kyma runtime, SAP Help Portal - SAP Online Help
質問 # 45
Which Prometheus component must you create to scrape metrics from targets you want to observe?
- A. Pod Monitor CRD
- B. Service Manifest
- C. Service Monitor CRD
正解：C
解説：
Explanation
To scrape metrics from targets you want to observe, you need to create a Service Monitor Custom Resource Definition (CRD) in Prometheus. A Service Monitor CRD defines the endpoints, ports, paths, and labels of the targets that expose metrics in a standard Prometheus format. The Service Monitor CRD also specifies how often the targets should be scraped and what relabeling rules should be applied. The Service Monitor CRD is automatically detected and processed by the Prometheus Operator, which creates the appropriate scrape configurations for Prometheus. The other options are not valid components for scraping metrics from targets.
A Pod Monitor CRD is similar to a Service Monitor CRD, but it defines the pods that expose metrics, rather than the services. A Service Manifest is a YAML file that defines the service type, version, and metadata, but it does not specify the metrics endpoints or scraping parameters. References: Side-by-Side Extensibility Based on SAP BTP, Kyma Runtime - Unit 4 - Lesson 2: Observability in Kyma, Prometheus Operator Documentation - Service Monitor
質問 # 46
Which application-based service proxy does the kyma-gateway use to handle traffic and forwarding to services?
- A. Nginx
- B. Envoy
- C. Traefik
正解：B
質問 # 47
How can you create a Kubernetes object from a file?
- A. kubectl create -f <file>
- B. kubectl install t <file>
- C. kubectl create -from-file <file>
- D. kubectl install-from-file <file>
正解：A
解説：
Explanation
You can use the kubectl create -f command to create a Kubernetes object from a file. The file can be a YAML or JSON file that specifies the configuration of the object, such as its apiVersion, kind, metadata, and spec.
The file can also be a URL that points to a remote file. The kubectl create -f command will send a POST request to the Kubernetes API server with the content of the file, and the API server will create the object according to the file. The other options are not valid kubectl commands. References: Imperative Management of Kubernetes Objects Using Configuration Files, Kubernetes Object Management
質問 # 48
Which kubectl command lists pods with the exact label "env-dev"?
- A. kubectl get pods -L env
- B. kubectl get pods - env=dev
- C. kubectl get pods -I env
- D. kubectl get pods -L env-dev
正解：D
質問 # 49
What are some benefits of using the Istio service mesh in SAP BTP, Kyma runtime? Note: There are 3 correct Answers to this question.
- A. Networking is decoupled from the application logic.
- B. Networking is coupled to the application logic.
- C. Traffic management between services can be controlled.
- D. Mutual TLS is supported for service to service communication.
- E. Distributed tracing can be used to trace request flows.
正解：A、C、D
解説：
Explanation
Istio is a service mesh that provides a uniform way to secure, connect, and monitor microservices running on different platforms and environments1. SAP BTP, Kyma runtime uses Istio as the default service mesh solution to enable the following benefits2:
Networking is decoupled from the application logic. Istio handles the network traffic between services using a data plane composed of Envoy proxies that are injected as sidecars to each service Pod. This way, the application code does not need to deal with networking aspects such as routing, load balancing, authentication, or encryption3.
Mutual TLS is supported for service to service communication. Istio enables mutual TLS (mTLS) by default for all services in the mesh, ensuring that the traffic is encrypted and authenticated. Istio also manages the certificates and keys for mTLS using a control plane component called Istiod4.
Traffic management between services can be controlled. Istio allows defining and applying traffic policies, such as timeouts, retries, circuit breakers, fault injection, mirroring, or routing rules, using custom resources such as VirtualServices and DestinationRules. These policies can be dynamically configured and updated without requiring service restarts.
References:
1: Discovering Istio - SAP Learning
2: Upcoming breaking change in SAP BTP, Kyma Runtime: Enabling the Istio CNI plugin | SAP Blogs
3: Istio / The Istio service mesh
4: Istio / Secure your service mesh
[5]: Istio / Traffic management overview
質問 # 50
If an application requires a persistent state between reboots, what must be done before it can be deployed?
- A. Create a Persistent Volume in the namespace
- B. Create a new entry in etcd.
- C. Create a Persistent Volume Claim for a pod.
正解：C
質問 # 51
What are some prerequisites for functions to receive events from Kyma Eventing? Note: There are 2 correct Answers to this question.
- A. A Cloud Events specification
- B. An API Rule with Oath keeper Access Rules for GET Requests
- C. The request to the function contains the event context
- D. A Subscription CR.
正解：A、D
質問 # 52
Which workload type is used to create time-based jobs?
- A. StatefulSet
- B. Job
- C. Deployment
- D. CronJob
正解：D
質問 # 53
When do you use a Daemon Set as the main workload type?
- A. To run a workload on every node in the cluster
- B. To run a batch job
- C. To run multiple instances of the same container
正解：A
解説：
Explanation
A DaemonSet ensures that all (or some) Nodes run a copy of a Pod. As nodes are added to the cluster, Pods are added to them. As nodes are removed from the cluster, those Pods are garbage collected. Deleting a DaemonSet will clean up the Pods it created2.
Some typical uses of a DaemonSet are: running a cluster storage daemon on every node, running a logs collection daemon on every node, running a node monitoring daemon on every node2.
DaemonSets are ideal in a variety of real-world use cases: Running Node monitoring agents, Running log collection agents, Running network plugins, Running service meshes3.
References:
Kubernetes DaemonSet - What It is & How to Use It (Example)
DaemonSet | Kubernetes
Kubernetes Daemonset: A Practical Guide - Spot.io
質問 # 54
What are some characteristics of Kubernetes pods? Note: There are 2 correct Answers to this question.
- A. They can be terminated and replaced anytime.
- B. They can contain deployments.
- C. They are the smallest deployable unit in Kubernetes.
- D. They are permanent units in Kubernetes.
正解：A、C
解説：
Explanation
Kubernetes pods are the smallest deployable units of computing that you can create and manage in Kubernetes. A pod is a group of one or more containers, with shared storage and network resources, and a specification for how to run the containers. Pods are the atomic unit on the Kubernetes platform. Pods are not permanent units in Kubernetes. They can be terminated and replaced anytime, either by the user or by the system. Pods are ephemeral and disposable entities that are created and destroyed dynamically. Pods can be scaled up or down, migrated across nodes, or rescheduled due to failures or maintenance. Pods cannot contain deployments. Deployments are higher-level resources that manage pods and provide declarative updates to them. A deployment can create multiple pods from the same template and ensure that the desired number of pods are always available. A pod can only contain containers and volumes, not other Kubernetes resources. References: Pods | Kubernetes, Viewing Pods and Nodes | Kubernetes, What is a Kubernetes pod? - Red Hat, What are Pods in Kubernetes? - Medium, Network overview | Google Kubernetes Engine (GKE) | Google Cloud.
質問 # 55
You have deployed a workload through a Kubernetes Deployment to SAP BTP, Kyma runtime. What must you do to expose the workload to the public internet? Note: There are 3 correct Answers to this question.
- A. Add a custom Virtual Service CR to secure the service.
- B. Configure rules and access Strategies.
- C. Create an API Rule CR.
- D. Add a readiness probe for your workload.
- E. Create a service to group your pods.
正解：B、C、E
解説：
Explanation
To expose a workload to the public internet, you need to create a service to group your pods, create an API Rule CR to define the host, path, and access strategies for your service, and configure rules and access strategies to secure your service with authentication and authorization mechanisms. A readiness probe is optional and used to check if your workload is ready to serve traffic. A custom Virtual Service CR is not required, as the API Rule CR creates one automatically. References: https://blogs.sap.com/2021/11/22/hardening-access-to-sap-kyma-runtime-apis-with-jw
https://blogs.sap.com/2023/10/18/sap-btp-kyma-api-rules-with-destinations-and-a-managed-approuter./
質問 # 56
In a Kubernetes cluster, which pattern represents a valid DNS name?
- A. svc.cluster.local.<service-name>.<namespace>
- B. <Namespace> <service-name> svc. Cluster. Local
- C. svc.cluster.local.<namespace> <service-name>
- D. <service name> <namespace>.svc.cluster.local
正解：D
解説：
Explanation
In a Kubernetes cluster, services are assigned a DNS name based on the following pattern: <service-name>.<namespace>.svc.cluster.local. This allows pods to access services within the same namespace or across namespaces using the fully qualified domain name (FQDN). The svc.cluster.local part is the default domain for the cluster, but it can be customized by the cluster administrator. References: Kubernetes Services, DNS for Services and Pods
質問 # 57
Which proxy pattern is used by the service mesh solution in SAP BTP, Kyma runtime?
- A. Per-Node
- B. Shared library
- C. Sidecar
- D. Per-Container
正解：C
質問 # 58
Which of the following technologies does the Kyme Eventing process use? Note: There are 3 correct Answers to this question.
- A. HTTP-post requests
- B. NATS
- C. Apache Kafka
- D. Jet Stream
- E. MQTT
正解：A、B、D
質問 # 59
......
C_KYMD_01試験問題集でC_KYMD_01練習テスト問題：https://www.goshiken.com/SAP/C_KYMD_01-mondaishu.html
無料C_KYMD_01学習問題集ガイド試験問題解答はここ：https://drive.google.com/open?id=1yc24ozKc4R-DgQdWn4i94tBnNnJQMKmw