Kubernetes and Cloud Native Associate

Here you have the best Linux Foundation KCNA practice exam questions

You have 199 total questions to study from
Each page has 5 questions, making a total of 40 pages
You can navigate through the pages using the buttons at the bottom
This questions were last updated on January 4, 2026
This site is not affiliated with or endorsed by Linux Foundation.

Question 1 of 199

What native runtime is Open Container Initiative (OCI) compliant?

runC

runV

kata-containers

gvisor

Correct Answer: A

runC is the native runtime that is Open Container Initiative (OCI) compliant. It is a lightweight, low-level container runtime that uses the container library libcontainer to provide facilities for container life cycle management, adhering to OCI specifications.

Question 2 of 199

Which API object is the recommended way to run a scalable, stateless application on your cluster?

ReplicaSet

Deployment

DaemonSet

Pod

Correct Answer: B

Question 3 of 199

A CronJob is scheduled to run by a user every one hour. What happens in the cluster when it's time for this CronJob to run?

Kubelet watches API Server for CronJob objects. When it's time for a Job to run, it runs the Pod directly.

Kube-scheduler watches API Server for CronJob objects, and this is why it's called kube-scheduler.

CronJob controller component creates a Pod and waits until it finishes to run.

CronJob controller component creates a Job. Then the Job controller creates a Pod and waits until it finishes to run.

Correct Answer: D

Question 4 of 199

What is the purpose of the kubelet component within a Kubernetes cluster?

A dashboard for Kubernetes Clusters that allows management and troubleshooting of applications.

A network proxy that runs on each node in your cluster, implementing part of the Kubernetes Service concept.

A component that watches for newly created Pods with no assigned node, and selects a node for them to run on.

An agent that runs on each node in the cluster. It makes sure that containers are running in a Pod.

Correct Answer: D

The kubelet is an agent that runs on each node in the cluster. It ensures that containers are running in a Pod. The kubelet communicates with the Kubernetes control plane to determine the desired state of the pods and works to maintain that state on its node.

Question 5 of 199

What is the default value for authorization-mode in Kubernetes API server?

--authorization-mode=RBAC

--authorization-mode=AlwaysAllow

--authorization-mode=AlwaysDeny

--authorization-mode=ABAC

Correct Answer: B

The default value for the authorization-mode in Kubernetes API server is --authorization-mode=AlwaysAllow. This means that all requests are allowed by default unless another authorization mode is specified.