Certified Kubernetes Administrator

Here you have the best CNCF CKA practice exam questions

You have 23 total questions across 5 pages (5 per page)
These questions were last updated on February 19, 2026
This site is not affiliated with or endorsed by CNCF.

Question 1 of 23

SIMULATION -
Exam CKA: Question 1 - Image 1

Context -
You have been asked to create a new ClusterRole for a deployment pipeline and bind it to a specific ServiceAccount scoped to a specific namespace.

Task -
Create a new ClusterRole named deployment-clusterrole, which only allows to create the following resource types:
✑ Deployment
✑ Stateful Set
✑ DaemonSet
Create a new ServiceAccount named cicd-token in the existing namespace app-team1.
Bind the new ClusterRole deployment-clusterrole to the new ServiceAccount cicd-token, limited to the namespace app-team1.

Question 2 of 23

SIMULATION -
Exam CKA: Question 2 - Image 1

Task -
Set the node named ek8s-node-0 as unavailable and reschedule all the pods running on it.

Question 3 of 23

SIMULATION -
Exam CKA: Question 3 - Image 1

Task -
Given an existing Kubernetes cluster running version 1.22.1, upgrade all of the Kubernetes control plane and node components on the master node only to version 1.22.2.
Be sure to drain the master node before upgrading it and uncordon it after the upgrade.
Exam CKA: Question 3 - Image 2

You are also expected to upgrade kubelet and kubectl on the master node.
Exam CKA: Question 3 - Image 3

Question 4 of 23

SIMULATION -
Exam CKA: Question 4 - Image 1

Task -
First, create a snapshot of the existing etcd instance running at https://127.0.0.1:2379, saving the snapshot to /var/lib/backup/etcd-snapshot.db.
Exam CKA: Question 4 - Image 2

Next, restore an existing, previous snapshot located at /var/lib/backup/etcd-snapshot-previous.db.

Question 5 of 23

SIMULATION -
Exam CKA: Question 5 - Image 1

Task -
Create a new NetworkPolicy named allow-port-from-namespace in the existing namespace fubar.
Ensure that the new NetworkPolicy allows Pods in namespace internal to connect to port 9000 of Pods in namespace fubar.
Further ensure that the new NetworkPolicy:
✑ does not allow access to Pods, which don't listen on port 9000
✑ does not allow access from Pods, which are not in namespace internal

About the CNCF CKA Certification Exam

About the Exam

The CNCF CKA (Certified Kubernetes Administrator) validates your knowledge and skills. Passing demonstrates proficiency and can boost your career prospects in the field.

How to Prepare

Work through all 23 practice questions across 5 pages. Focus on understanding the reasoning behind each answer rather than memorizing responses to be ready for any variation on the real exam.

Why Practice Exams?

Practice exams help you familiarize yourself with the question format, manage your time, and reduce anxiety on the test day. Our CKA questions are regularly updated to reflect the latest exam objectives.