Certified Kubernetes Administrator

Here you have the best CNCF CKA practice exam questions

  • You have 23 total questions to study from
  • Each page has 5 questions, making a total of 5 pages
  • You can navigate through the pages using the buttons at the bottom
  • This questions were last updated on November 18, 2025
  • This site is not affiliated with or endorsed by CNCF.
Question 1 of 23
SIMULATION -
Exam CKA: Question 1 - Image 1

Context -
You have been asked to create a new ClusterRole for a deployment pipeline and bind it to a specific ServiceAccount scoped to a specific namespace.

Task -
Create a new ClusterRole named deployment-clusterrole, which only allows to create the following resource types:
✑ Deployment
✑ Stateful Set
✑ DaemonSet
Create a new ServiceAccount named cicd-token in the existing namespace app-team1.
Bind the new ClusterRole deployment-clusterrole to the new ServiceAccount cicd-token, limited to the namespace app-team1.
    Correct Answer:
    Exam CKA: Question 1 - Image 2
Question 2 of 23
SIMULATION -
Exam CKA: Question 2 - Image 1

Task -
Set the node named ek8s-node-0 as unavailable and reschedule all the pods running on it.
    Correct Answer:
    Exam CKA: Question 2 - Image 2
Question 3 of 23
SIMULATION -
Exam CKA: Question 3 - Image 1

Task -
Given an existing Kubernetes cluster running version 1.22.1, upgrade all of the Kubernetes control plane and node components on the master node only to version 1.22.2.
Be sure to drain the master node before upgrading it and uncordon it after the upgrade.
Exam CKA: Question 3 - Image 2
You are also expected to upgrade kubelet and kubectl on the master node.
Exam CKA: Question 3 - Image 3
    Correct Answer:
    Exam CKA: Question 3 - Image 4


    Exam CKA: Question 3 - Image 5
Question 4 of 23
SIMULATION -
Exam CKA: Question 4 - Image 1

Task -
First, create a snapshot of the existing etcd instance running at https://127.0.0.1:2379, saving the snapshot to /var/lib/backup/etcd-snapshot.db.
Exam CKA: Question 4 - Image 2
Exam CKA: Question 4 - Image 3
Next, restore an existing, previous snapshot located at /var/lib/backup/etcd-snapshot-previous.db.
    Correct Answer:
    Exam CKA: Question 4 - Image 4
Question 5 of 23
SIMULATION -
Exam CKA: Question 5 - Image 1

Task -
Create a new NetworkPolicy named allow-port-from-namespace in the existing namespace fubar.
Ensure that the new NetworkPolicy allows Pods in namespace internal to connect to port 9000 of Pods in namespace fubar.
Further ensure that the new NetworkPolicy:
✑ does not allow access to Pods, which don't listen on port 9000
✑ does not allow access from Pods, which are not in namespace internal
    Correct Answer:
    Exam CKA: Question 5 - Image 2


    Exam CKA: Question 5 - Image 3