Provide Valid CKA Dumps To Help You Prepare For Certified Kubernetes Administrator (CKA) Program Exam Exam Oct 31, 2026 [Q31-Q52]

Q31. List all service account and create a service account called “admin”

Q32. Get all the pods with label “env”

Q33. You must connect to the correct host.
Failure to do so may result in a zero score.
[candidate@base] $ ssh Cka000055
Task
Verify the cert-manager application which has been deployed to your cluster .
Using kubectl, create a list of all cert-manager Custom Resource Definitions (CRDs ) and save it to ~/resources.yaml .
You must use kubectl ‘s default output format.
Do not set an output format.
Failure to do so will result in a reduced score.
Using kubectl, extract the documentation for the subject specification field of the Certificate Custom Resource and save it to ~/subject.yaml.

Q34. Create a pod that having 3 containers in it? (Multi-Container)

Q35. A Service named my-service’ is exposed on port 80 of your Kubernetes cluster. You need to access the service from a specific node in the cluster using its internal IP address. How can you find the internal IP address of the node running a pod associated with ‘my-service’?

Q36. You must connect to the correct host.
Failure to do so may result in a zero score.
[candidate@base] $ ssh Cka000054
Context:
Your cluster ‘s CNI has failed a security audit. It has been removed. You must install a new CNI that can enforce network policies.
Task
Install and set up a Container Network Interface (CNI ) that meets these requirements:
Pick and install one of these CNI options:
Flannel version 0.26.1
Manifest:
https://github.com/flannel-io/flannel/releases/download/v0.26.1/kube-flannel.yml
Calico version 3.28.2
Manifest:
https://raw.githubusercontent.com/project calico/calico/v3.28.2/manifests/tigera-operator.yaml

Q37. Create an nginx pod and set an env value as ‘var1=val1’. Check the env value existence within the pod

Q38. Get list of PVs and order by size and write to file “/opt/pvstorage.txt”

Q39. Check the image version in pod without the describe command

Q40. Score:7%

Task
Create a new PersistentVolumeClaim
* Name: pv-volume
* Class: csi-hostpath-sc
* Capacity: 10Mi
Create a new Pod which mounts the PersistentVolumeClaim as a volume:
* Name: web-server
* Image: nginx
* Mount path: /usr/share/nginx/html
Configure the new Pod to have ReadWriteOnce access on the volume.
Finally, using kubectl edit or kubectl patch expand the PersistentVolumeClaim to a capacity of 70Mi and record that change.

Q41. You have a Deployment named ‘postgres-deployment’ running a PostgreSQL database server. You need to configure the PostgreSQL server with a specific configuration file stored in a ConfigMap named postgres-config’. The configuration file includes sensitive information like the PostgreSQL superuser password. How can you securely store and mount this sensitive information without compromising security?

Q42. Score: 4%

Task
Schedule a pod as follows:
* Name: nginx-kusc00401
* Image: nginx
* Node selector: disk=ssd

Q43. Create a Pod with three busy box containers with commands “ls; sleep 3600;”, “echo Hello World; sleep 3600;” and “echo this is the third container; sleep 3600” respectively and check the status

Q44. A Kubernetes worker node, named wk8s-node-0 is in state NotReady. Investigate why this is the case, and perform any appropriate steps to bring the node to a state, ensuring that any changes are made permanent.
You can ssh to the failed node using:
[student@node-1] $ | ssh Wk8s-node-0
You can assume elevated privileges on the node with the following command:
[student@w8ks-node-0] $ | sudo -i

Q45. Monitor the logs of pod foo and:
Extract log lines corresponding
unable-to-access-website
Write them to/opt/KULM00201/foo

Q46. You have a Deployment named ‘nginx-deployment running an Nginx server. The Nginx configuration file is stored in a ConfigMap named ‘nginx-config’. You need to dynamically update the Nginx configuration file without restarting the Nginx pods.

Q47. Create a deployment spec file that will:
* Launch 7 replicas of the nginx Image with the labelapp_runtime_stage=dev
* deployment name: kual00201
Save a copy of this spec file to /opt/KUAL00201/spec_deployment.yaml
(or /opt/KUAL00201/spec_deployment.json).
When you are done, clean up (delete) any new Kubernetes API object that you produced during this task.

Q48. You have a Kubernetes cluster with a variety of namespaces: ‘default’, ‘development’, ‘production’, and ‘testing’. You need to implement granular role-based access control (RBAC) to ensure that:
– Developers in the ‘development’ namespace can only create and delete pods within that namespace.
– Developers in the ‘testing’ namespace can only create, delete and scale pods within that namespace.
– Production team members in the ‘production’ namespace can only view pods and deployments.
Provide the necessary YAML files for the Role, RoleBinding, and ServiceAccount objects to enforce these permissions. Ensure that the service accounts are bound to specific namespaces and that the RoleBindings are correctly defined to grant the necessary access to each group.

Q49. Create a pod with image nginx called nginx and allow traffic on port 80

Q50. You are running a service that handles requests from multiple pods. How can you scale the service to handle increased traffic without impacting the service availability during the scaling process?

Q51. Create a pod with image nginx called nginx and allow traffic on port 80 See the solution below.

Q52. Ensure a single instance of pod nginx is running on each node of the Kubernetes cluster where nginx also represents the Image name which has to be used. Do not override any taints currently in place.
Use DaemonSet to complete this task and use ds-kusc00201 as DaemonSet name.