2 packs: 15% off with code BUY2. 3 or more: 20% off with code BUY3.

LINUX FOUNDATION · CKA

Linux Foundation CKA Exam Practice Questions

99% pass rateUpdated 1 Nov 202640 tasks2 PDFs, instant download
4.520 reviews
(20 customer reviews)

US$39

Every task with the correct answer and why the other options are wrong.

Download the free sample

Card, Apple Pay, Google Pay or PayPal. Download links are on your order page and in your email the moment you pay.

99% pass rate. Pass or your money back.Fail the exam after using this pack and we refund it, or swap it for any other pack. How the guarantee works
Passed the CKA! This is a practical exam so having seen the question types beforehand really helped with pacing. A lot of familiar content on exam day. Highly recommend.
Derek KCKA
Category:
TRY BEFORE YOU BUY

Three of the 40 tasks in this pack

Question 1

Show the case study this question is based on

SIMULATION

Context

You have been asked to create a new ClusterRole for a deployment pipeline and bind it to a specific ServiceAccount scoped to a specific namespace.

Task

Create a new ClusterRole named deployment-clusterrole, which only allows to create the following resource types:

• Deployment

• Stateful Set

• DaemonSet

Create a new ServiceAccount named cicd-token in the existing namespace app-team1.

Bind the new ClusterRole deployment-clusterrole to the new ServiceAccount cicd-token, limited to the namespace app-team1.

Completed Answer

Create a ClusterRole with specific resource permissions, a ServiceAccount in a namespace, and bind them with a RoleBinding in that namespace.

Step 1 → kubectl config use-context k8s

Step 2 → kubectl create clusterrole deployment-clusterrole --verb=create --resource=Deployment,StatefulSet,DaemonSet

Step 3 → kubectl create sa cicd-token --namespace app-team1

Step 4 → kubectl create rolebinding deploy-b -n app-team1 --clusterrole=deployment-clusterrole --serviceaccount=app-team1:cicd-token

How To Work It Out

1. Switch to the k8s context so the commands run against the correct cluster.

2. Create the ClusterRole deployment-clusterrole with only the create verb on Deployment, StatefulSet and DaemonSet.

3. Create the ServiceAccount cicd-token in the app-team1 namespace.

4. Bind the ClusterRole with a RoleBinding named deploy-b created in app-team1, so the permissions apply only in that namespace.

A ClusterRole can be granted in two ways: a ClusterRoleBinding applies it in every namespace, while a RoleBinding applies it only in the namespace where the RoleBinding lives. Because the task limits the binding to app-team1, the RoleBinding is created with -n app-team1 and points at the ClusterRole and the app-team1:cicd-token ServiceAccount. The ServiceAccount can then create Deployments, StatefulSets and DaemonSets in app-team1 and nowhere else.

Exhibit for question 1

Show answer and explanation

The answer and explanation for this question are in the free sample PDF.

Question 2

SIMULATION

Task

Set the node named ek8s-node-0 as unavailable and reschedule all the pods running on it.

Completed Answer

Set the node named ek8s-node-0 as unavailable and reschedule all the pods running on it.

Step 1 → kubectl config use-context ek8s

Step 2 → kubectl get nodes

Step 3 → kubectl drain ek8s-node-0 --ignore-daemonsets --delete-emptydir-data

Step 4 → kubectl get nodes

How To Work It Out

1. Switch to the ek8s context.

2. List the nodes and find ek8s-node-0.

3. Drain ek8s-node-0 with --ignore-daemonsets and --delete-emptydir-data so it is cordoned and its pods are evicted.

4. Run kubectl get nodes to confirm ek8s-node-0 shows SchedulingDisabled.

kubectl drain first cordons the node, marking it unschedulable, and then evicts its pods so their controllers recreate them on other nodes. The node to drain is ek8s-node-0, the one the task names. --ignore-daemonsets lets the drain proceed past DaemonSet pods, and --delete-emptydir-data allows eviction of pods that use emptyDir storage.

Exhibit for question 2

Show answer and explanation

The answer and explanation for this question are in the free sample PDF.

Question 3

Show the case study this question is based on

SIMULATION

Task

The platform team publishes cluster components in an internal Helm chart repository. Use Helm to install the metrics gateway component as follows:

• Repository name: platform

• Repository URL: https://charts.example.internal/stable

• Chart: metrics-gateway

• Release name: gateway

• Namespace: observability (it does not exist yet and must be created by the installation)

• Value override: set the chart value replicaCount to 2 on the command line, without a values file

Verify that the release is deployed in the observability namespace and that the override is recorded for the release.

Completed Answer

Add the internal platform chart repository, install chart metrics-gateway as release gateway into the new namespace observability with replicaCount set to 2, and verify the release and its values.

Add the chart repository → helm repo add platform https://charts.example.internal/stable

Refresh the repository index → helm repo update

Install the release → helm install gateway platform/metrics-gateway --namespace observability --create-namespace --set replicaCount=2

Verify the release → helm list -n observability

Verify the override → helm get values gateway -n observability

Verify the Pods → kubectl get pods -n observability

How To Work It Out

1. Register the internal repository under the name platform with helm repo add, giving the name first and the URL second.

2. Run helm repo update so the local index lists the current version of the metrics-gateway chart.

3. Install release gateway from the chart reference platform/metrics-gateway, adding --namespace observability, --create-namespace because the namespace is missing, and --set replicaCount=2 for the override.

4. Run helm list -n observability and confirm that release gateway shows the status deployed.

5. Run helm get values for the release to confirm the user-supplied value replicaCount: 2, then list the Pods in observability to see the component start.

helm repo add stores the repository name and URL in the local Helm configuration, and helm repo update downloads its current chart index, so the reference platform/metrics-gateway resolves to the latest stable chart in that repository. helm install takes the release name first and the chart second. --namespace places the release and its objects in observability, and --create-namespace creates that namespace because it is not present. --set overrides one chart value on the command line, and Helm stores the override with the release, which is why helm get values shows replicaCount: 2. The same commands and flags work in Helm 3 and Helm 4.

Show answer and explanation

The answer and explanation for this question are in the free sample PDF.

See all 4 free tasks Get the full pack, US$39

REVIEWS

20 reviews for Linux Foundation CKA Exam Practice Questions

  1. Derek K –

    CKA passed!

    Passed the CKA! This is a practical exam so having seen the question types beforehand really helped with pacing. A lot of familiar content on exam day. Highly recommend.

  2. Ford Ocampo –

    Cleared my CKA

    Cleared the CKA! The dump covers the real exam well. Went through it twice and passed on first attempt.

  3. Mendoza –

    Passed, thank you. Real questions in here.

  4. Arjun Bautista –

    Passed comfortably. Would buy again.

  5. Dawn Glime –

    Questions appeared in exam

    A lot of questions appeared in my actual exam. Passed.

  6. Bianca Chen –

    Real deal

    This is the real deal. Passed first attempt.

  7. Lillian –

    I passed the CKA exams with over 92% marks today.

  8. Eartha –

    The CKA practice questions contains questions and answers which i found to be very helpful for you to pass the exam, additionally, the CKA practice questions comes all the latest exam questions!

  9. Kristin –

    Pass CKA one time. Very beautiful! It's certainly worth it.

  10. Saxon –

    I have passed my CKA exam with the help of this CKA practice dump! It is valid for sure. You can use it as a guide to help you pass the exam.

  11. Sheila –

    Dumps for CKA certification exam were the latest and quite helpful. Gave a thorough understanding of the exam. Passed my exam with 91% marks.

  12. Boyce –

    Perfect CKA exam braindumps! I just tried this file and it was revolutionary in its results.

  13. Shanthi Yadav –

    Hello everyone, I just completed the Certified Kubernetes Administrator (CKA) examination - 90% of the questions from the CKA Dumps were supplied by this site,(same questions). Thanks Certstash

  14. Elizabeth –

    I have cleared the exam today with 95%! I'm satisfied with the result. Exact Questions in CKA exam questions.

  15. Barbara –

    These CKA dumps are valid! They are very reliable! You can count on them!

  16. Webster –

    CertStash Kubernetes Administrator CKA practice questions help me a lot.

  17. Cheryl –

    Probably 90% of the test was directly from Cert Stash CKA real exam questions

  18. Mamie –

    With these CKA exam questions, the CKA exam isn't hard at all. You can totally rely on them. I got my certification today.

  19. Phillip Wag –

    Pass my Certification Exam Certified in Kubernetes Administrator, Use only two resource for CKA Exam prep, One tutorial from Udemy Kubernetes for the Absolute Beginners - Hands-on and 2nd This site CKA Exam questions in PDF format, and Pass exam on first attempt, CKA Dumps provided by this site was extremely helpful. Thanks for Valid CKA Exam questions.

  20. Farid –

    Legit

Only logged in customers who have purchased this product may leave a review.

How much of the Linux Foundation CKA bank is free?

40 tasks in the bank

Each step includes the one before, so buying only adds new tasks.

  • You are here10tasksFree sampleThree on this page, all ten as a PDF.Download the sample
  • 20the first half of the packHalf PackFree by email, as one PDF, every answer explained.Get the Half Pack
  • 40100%, the whole bankFull pack, US$39Plus the questions-only PDF, monthly updates, refund if you fail.Get the full pack
ABOUT THIS PACK

What’s in the Linux Foundation CKA pack

  • 40 tasks across all five CKA domains
  • Step-by-step solutions for every task
  • A tasks-only PDF for timed practice runs
  • Instant delivery by email the moment you check out
  • Free monthly updates for as long as the exam is live
  • Pass or your money back

The CKA costs US$445 per registration and includes one free retake. This pack is US$39, paid once, and refunded if you fail.

What makes the CKA hard

There is no multiple choice, no definitions and no process of elimination. You get a live Kubernetes cluster, a terminal and a set of tasks: you either complete them or you do not.

15 to 20 tasks in 2 hours, 66% to pass. Knowing the commands is not enough; you need to execute them fast, verify your work and move on without hesitation. Most candidates who fail ran out of time, not knowledge, so speed with kubectl is really what the exam tests.

This pack has 40 real tasks for the CKA with complete step-by-step solutions, covering the exact formats the Linux Foundation uses, cluster troubleshooting, RBAC, network policies, storage and scheduling, plus the fastest way to solve each one.

About the exam

The CKA is a performance-based certification from the Cloud Native Computing Foundation (CNCF) and The Linux Foundation. It validates the ability to install, configure and manage production-grade Kubernetes clusters. It is fully hands-on, with no multiple choice, conducted in a live terminal environment. Valid for two years, with one free retake included per registration.

Read the Linux Foundation CKA study guide

Questions before you buy

How quickly do I receive it?

Straight away. The full PDF and a questions-only copy are emailed to you the moment your payment goes through, and the same links are on your order page.

Are updates included?

Yes. The pack is updated every month for as long as the exam is live, and updates are free for everyone who has bought it.

What if I fail the exam?

We refund the pack, or swap it for any other pack if you would rather keep studying. Sit the exam 7 to 30 days after buying, then send your official score report within 7 days of the exam date, as set out in the refund policy.

What is your pass rate?

99% of customers who prepare with a CertStash pack pass. If you do not, we refund the pack, or swap it for another pack.

Can I share it with colleagues?

Each purchase is licensed to one person. For a team, school or training organisation, email support@certstash.com for a licence that fits.