Architecture (25%)
📦 Workloads
& Scheduling (15%)
🔌 Services &
Networking (20%)
💾 Storage
(10%)
🔧 Troubleshooting
(30%)
Which component of the Kubernetes control plane stores all cluster data and configuration in a key-value format?
Which component runs on every worker node and is responsible for ensuring containers are running in pods?
In Kubernetes RBAC, what does a RoleBinding do?
Workloads & Scheduling
Domain 2 — 15% of Exam
What is the smallest deployable unit in Kubernetes?
Which Kubernetes workload resource ensures that a specified number of pod replicas are running at any given time and handles rolling updates?
How do you scale a Deployment named “webapp” to 5 replicas using kubectl?
kubectl scale deployment webapp --replicas=5 ✅kubectl resize deployment webapp 5kubectl set replicas webapp 5kubectl update deployment webapp --replicas=5kubectl scale deployment webapp --replicas=5 is the correct imperative command. You can also use kubectl edit deployment webapp to modify the YAML directly, or kubectl apply -f with an updated manifest. The CKA exam is hands-on, so knowing kubectl commands is essential. Other useful commands: kubectl get, kubectl describe, kubectl logs, kubectl exec.Services & Networking
Domain 3 — 20% of Exam
Which Kubernetes Service type exposes the service on each node’s IP at a static port, allowing external access?
NodeIP:NodePort. ClusterIP (default) is internal-only. LoadBalancer provisions a cloud load balancer (AWS ELB, GCP LB) and is the standard for production external access. ExternalName maps a service to a DNS name. Know all four types and when to use each.Which Kubernetes resource provides HTTP/HTTPS routing to services based on hostnames and URL paths?
app.example.com/api to the API service and app.example.com/web to the frontend service. An Ingress Controller (NGINX, Traefik, HAProxy) must be deployed to implement Ingress rules. NetworkPolicy controls pod-to-pod traffic.How does CoreDNS enable service discovery within a Kubernetes cluster?
frontend.default.svc.cluster.local. CoreDNS automatically creates DNS records for services and pods. This is how microservices communicate inside a cluster without hardcoding IP addresses.Storage
Domain 4 — 10% of Exam
What is the relationship between a PersistentVolume (PV) and a PersistentVolumeClaim (PVC) in Kubernetes?
Which Kubernetes object is used to store non-sensitive configuration data as key-value pairs and inject it into pods as environment variables or files?
Troubleshooting
Domain 5 — 30% of Exam (Highest Weight!)
A pod is stuck in CrashLoopBackOff status. Which kubectl command should you use first to diagnose the issue?
kubectl logs <pod-name> ✅kubectl delete pod <pod-name>kubectl scale deployment --replicas=0kubectl cordon <node>kubectl logs <pod-name> shows the container’s stdout/stderr output — revealing application errors, misconfigurations, or crash reasons. Use --previous flag to see logs from the last crashed container. CrashLoopBackOff means the container starts, crashes, and Kubernetes keeps restarting it with exponential backoff. Also use kubectl describe pod to check events, resource limits, and scheduling issues.A pod is stuck in Pending state. Which is the MOST likely cause?
kubectl describe pod to check the Events section — it will show why scheduling failed. CrashLoopBackOff = already scheduled but crashing. ImagePullBackOff = can’t pull image.A worker node is showing as NotReady in the cluster. What should you check first?
systemctl status kubelet, journalctl -u kubelet for logs. Common causes include kubelet service stopped, container runtime (containerd) crashed, certificate issues, or network connectivity problems. Also check disk pressure and memory with kubectl describe node. Troubleshooting is 30% of the CKA exam — the highest-weighted domain.🏗️ Kubernetes Architecture Quick Reference
etcd — Key-value data store
kube-scheduler — Assigns pods to nodes
kube-controller-manager — Runs controllers
cloud-controller-manager — Cloud integrations
kube-proxy — Network rules & load balancing
Container Runtime — containerd / CRI-O
Pods — Smallest deployable units
CoreDNS — Cluster DNS resolution
⌨️ Essential kubectl Commands
(pods, svc, nodes)
& events
output
a container
config
up or down
imperatively
resources
🔌 4 Kubernetes Service Types
(default type)
each node IP
(production)
DNS CNAME
💡 CKA Exam Tips
kubectl run, kubectl create) for speed, and kubectl explain for YAML reference.kubectl get → kubectl describe → kubectl logs → kubectl exec. Know how to fix NotReady nodes (kubelet issues), CrashLoopBackOff pods (application errors), Pending pods (scheduling problems), and ImagePullBackOff (wrong image name or registry auth).
🎯 Keep Practicing — More MCQs Available!
We update our question bank regularly to match the latest CNCF exam objectives
Frequently Asked Questions
The CKA is considered a challenging exam. It has 15-20 performance-based tasks completed in a live Kubernetes cluster with a 2-hour time limit. The passing score is 66%. Because it’s hands-on (no multiple choice), you must actually solve problems — there’s no guessing. Most candidates with 3-6 months of Kubernetes experience need 4-8 weeks of dedicated preparation. The exam includes one free retake.
The CKA exam costs $395 USD and includes one free retake within 12 months. It also includes a killer.sh exam simulator session (2 attempts). The exam is delivered online and proctored through PSI. CNCF frequently offers discounts during KubeCon events and holidays — wait for a 30-50% discount if your timeline allows.
Yes — the CKA certification is valid for 3 years (changed from 2 years in 2023). To renew, you must retake the current version of the exam. The Kubernetes version tested is updated regularly to stay current. CKA-certified professionals earn an average salary of $120,000-$160,000 in the US, making it one of the highest-paying DevOps certifications.
CKA (Administrator) focuses on cluster management — installation, configuration, networking, storage, security, and troubleshooting. CKAD (Application Developer) focuses on building, deploying, and debugging containerized applications. If you manage clusters → CKA first. If you deploy apps on Kubernetes → CKAD first. There is ~40% content overlap, so earning one makes the other easier.
Leave a Comment