McAfee Secure

CNCF CKA Bundle

Exam Code: CKA

Exam Name Certified Kubernetes Administrator

Certification Provider: CNCF

Corresponding Certification: CKA

CNCF CKA Bundle $44.99

100% CNCF CKA Guaranteed Success With Testking Training Materials

Get Real CKA Exam Questions & Expert Verified Answers as Experienced on the Real Exam!

  • Questions & Answers

    CKA Questions & Answers

    58 Questions & Answers

    The ultimate exam preparation tool, Questions & Answers mirrors the actual CKA exam while allowing you to hone and measure every aspect of your test-taking ability.

  • CKA Video Course

    CKA Training Course

    138 Video Lectures

    CKA Video Course is developed by CNCF Professionals to help you pass the CKA exam.

    Description

    This course will improve your knowledge and skills required to pass Certified Kubernetes Administrator exam.
  • Study Guide

    CKA Study Guide

    268 PDF Pages

    Developed by industry experts, this 268-page guide spells out in painstaking detail all of the information you need to ace CKA exam.

Certified Kubernetes Administrator (CKA) Practice Tests

Satisfaction Guaranteed

Money Back Guarantee

Testking provides hassle-free money back guarantee with our products. That is because we have 100% trust in the abilities of our professional and experience product team, and our record is a proof of that.

99.6% PASS RATE
Total Cost: $194.97
Bundle Price: $149.98

Purchase Individually

  • Questions & Answers

    Questions & Answers

    58 Questions

    $124.99
  • CKA Video Course

    Training Course

    138 Video Lectures

    $39.99
  • Study Guide

    Study Guide

    268 PDF Pages

    $29.99

CNCF CKA Practice Test 44

Question 430

At Pinecrest logistics, in a sandbox Kubernetes cluster during a recovery tabletop exercise: Pods for Deployment dispatch-api in fulfillment must tolerate the lab taint special=dedicated:NoSchedule while leaving placement policy unchanged. Work only within the stated target and verify before declaring success. Which Kubernetes behavior best explains the required change or diagnosis?

  1. A toleration allows a Pod past a matching taint but does not ensure placement without node selection and capacity.
  2. Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement.
  3. Kubernetes Secrets are API objects intended for sensitive values, but literals in a shell command can leak via shell history and process observation.
  4. Pod templates can reference Secret keys without copying literal secret values into the Deployment spec.

Explanation

Correct Answer

A:

A toleration allows a Pod past a matching taint but does not ensure placement without node selection and capacity. This explains the stated condition. The corresponding action is: Run kubectl -n fulfillment patch deployment dispatch-api --type=merge -p '{"spec":{"template":{"spec":{"tolerations":[{"key":"special","operator":"Equal","value":"dedicated","effect":"NoSchedule"}]}}}}' after checking existing tolerations. The direct acceptance evidence is: Run kubectl -n fulfillment get deployment dispatch-api -o yaml and inspect spec.template.spec.tolerations before testing scheduling.

Incorrect Answers

B:

This principle describes a separate cause: Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement. The reported condition is governed by: A toleration allows a Pod past a matching taint but does not ensure placement without node selection and capacity. The two mechanisms should not be conflated.

C:

Kubernetes Secrets are API objects intended for sensitive values, but literals in a shell command can leak via shell history and process observation. That explanation applies to a different technical failure. Here the controlling principle is: A toleration allows a Pod past a matching taint but does not ensure placement without node selection and capacity.

D:

The offered statement is true for this other mechanism: Pod templates can reference Secret keys without copying literal secret values into the Deployment spec. It does not explain the facts described here, which follow from: A toleration allows a Pod past a matching taint but does not ensure placement without node selection and capacity.

Question 431

At Pinecrest logistics, in a sandbox Kubernetes cluster during a recovery tabletop exercise: Pods for Deployment dispatch-api in fulfillment must tolerate the lab taint special=dedicated:NoSchedule while leaving placement policy unchanged. Work only within the stated target and verify before declaring success. Which observation best verifies the requested outcome rather than an unrelated state?

  1. Run kubectl -n fulfillment get secret lab-dispatch-key -o jsonpath='{.type}' and confirm the expected Secret exists without displaying the test token.
  2. Run kubectl -n fulfillment get deployment dispatch-api -o yaml and inspect spec.template.spec.tolerations before testing scheduling.
  3. Run kubectl -n fulfillment get deployment dispatch-api -o jsonpath='{.spec.strategy.rollingUpdate}' and verify the values.
  4. Run kubectl -n fulfillment rollout status deployment/dispatch-api and inspect the container image in the Deployment spec.

Explanation

Correct Answer

B:

Run kubectl -n fulfillment get deployment dispatch-api -o yaml and inspect spec.template.spec.tolerations before testing scheduling. This validates the affected object or control path, rather than only showing a command completed. The underlying reason is: A toleration allows a Pod past a matching taint but does not ensure placement without node selection and capacity. The intended action is: Run kubectl -n fulfillment patch deployment dispatch-api --type=merge -p '{"spec":{"template":{"spec":{"tolerations":[{"key":"special","operator":"Equal","value":"dedicated","effect":"NoSchedule"}]}}}}' after checking existing tolerations.

Incorrect Answers

A:

This observation would test a different technical dependency: Kubernetes Secrets are API objects intended for sensitive values, but literals in a shell command can leak via shell history and process observation. The current issue is governed by: A toleration allows a Pod past a matching taint but does not ensure placement without node selection and capacity. Its decisive check is “Run kubectl -n fulfillment get deployment dispatch-api -o yaml and inspect spec.template.spec.tolerations before testing scheduling”.

C:

That test belongs to another control with this basis: Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement. In the current case, the governing reason is: A toleration allows a Pod past a matching taint but does not ensure placement without node selection and capacity. The direct verification is “Run kubectl -n fulfillment get deployment dispatch-api -o yaml and inspect spec.template.spec.tolerations before testing scheduling”.

D:

This observation would test a different technical dependency: Updating a Deployment Pod template triggers a controlled rollout; restarting Pods alone will not change the image reference. The current issue is governed by: A toleration allows a Pod past a matching taint but does not ensure placement without node selection and capacity. Its decisive check is “Run kubectl -n fulfillment get deployment dispatch-api -o yaml and inspect spec.template.spec.tolerations before testing scheduling”.

Question 432

At Pinecrest logistics, in a sandbox Kubernetes cluster during a recovery tabletop exercise: Pods for Deployment dispatch-api in fulfillment must tolerate the lab taint special=dedicated:NoSchedule while leaving placement policy unchanged. Work only within the stated target and verify before declaring success. Which operational control most directly prevents this failure or configuration drift?

  1. Use reviewed scaling boundaries and monitor HPA ownership before manual replica changes.
  2. Keep secret values out of logs and plan rollouts when Secret-backed environment variables change.
  3. Treat taints and tolerations as paired scheduling controls and review preexisting tolerations when patching arrays.
  4. Review resource sizing against actual usage and avoid scheduling on unsupported limits alone.

Explanation

Correct Answer

C:

Treat taints and tolerations as paired scheduling controls and review preexisting tolerations when patching arrays. This reduces recurrence of the specific operational failure. It reinforces the action: Run kubectl -n fulfillment patch deployment dispatch-api --type=merge -p '{"spec":{"template":{"spec":{"tolerations":[{"key":"special","operator":"Equal","value":"dedicated","effect":"NoSchedule"}]}}}}' after checking existing tolerations. The relevant mechanism is: A toleration allows a Pod past a matching taint but does not ensure placement without node selection and capacity.

Incorrect Answers

A:

The suggested review tracks a different technical risk: Scaling the Deployment changes desired replica count through its controller; editing an individual Pod would not preserve the desired state. Here the sustained control must address: A toleration allows a Pod past a matching taint but does not ensure placement without node selection and capacity. Choose “Treat taints and tolerations as paired scheduling controls and review preexisting tolerations when patching arrays”.

B:

That safeguard is relevant to: Pod templates can reference Secret keys without copying literal secret values into the Deployment spec. The current failure instead follows from: A toleration allows a Pod past a matching taint but does not ensure placement without node selection and capacity. Its prevention measure is “Treat taints and tolerations as paired scheduling controls and review preexisting tolerations when patching arrays”.

D:

The suggested review tracks a different technical risk: Requests inform scheduling and limits cap runtime consumption; the settings play different roles. Here the sustained control must address: A toleration allows a Pod past a matching taint but does not ensure placement without node selection and capacity. Choose “Treat taints and tolerations as paired scheduling controls and review preexisting tolerations when patching arrays”.

Question 433

At Northstar finance, in an isolated training cluster during a scheduled maintenance rehearsal: Deployment invoice-api in namespace ledger should autoscale between 2 and 6 replicas at 65% CPU utilization with metrics API available. Work only within the stated target and verify before declaring success. Which command or initial safe diagnostic step best addresses the stated lab task?

  1. Run kubectl -n ledger autoscale deployment invoice-api --cpu-percent=65 --min=2 --max=6 after setting valid CPU requests.
  2. Run kubectl -n observability set resources deployment/metrics-api --requests=cpu=400m --limits=memory=384Mi after verifying the Deployment's container selection.
  3. Run kubectl -n ledger set resources deployment/invoice-api --requests=cpu=250m --limits=memory=256Mi after verifying the Deployment's container selection.
  4. Run kubectl -n ledger patch cronjob daily-archive --type=merge -p '{"spec":{"suspend":true}}'.

Explanation

Correct Answer

A:

Run kubectl -n ledger autoscale deployment invoice-api --cpu-percent=65 --min=2 --max=6 after setting valid CPU requests. This is the appropriate command-line action or first safe diagnostic. The technical reason is: HPA evaluates metrics relative to Pod resource requests; missing metrics or requests can leave desired replicas unknown. Validate the result with: Run kubectl -n ledger get hpa invoice-api and inspect observed utilization and replica bounds. Execute changes only in an authorized disposable lab or after normal production change controls.

Incorrect Answers

B:

This alternative is a response to another technical cause: Requests inform scheduling and limits cap runtime consumption; the settings play different roles. The reported case instead depends on: HPA evaluates metrics relative to Pod resource requests; missing metrics or requests can leave desired replicas unknown. The action that directly addresses it is “Run kubectl -n ledger autoscale deployment invoice-api --cpu-percent=65 --min=2 --max=6 after setting valid CPU requests”.

C:

The proposed action belongs to the mechanism: Requests inform scheduling and limits cap runtime consumption; the settings play different roles. Here the stated fault follows a different mechanism: HPA evaluates metrics relative to Pod resource requests; missing metrics or requests can leave desired replicas unknown. The corrective choice is “Run kubectl -n ledger autoscale deployment invoice-api --cpu-percent=65 --min=2 --max=6 after setting valid CPU requests”.

D:

The offered action targets: CronJob suspension prevents new scheduled Jobs but does not terminate existing Jobs already running. The case facts point instead to: HPA evaluates metrics relative to Pod resource requests; missing metrics or requests can leave desired replicas unknown. Implement “Run kubectl -n ledger autoscale deployment invoice-api --cpu-percent=65 --min=2 --max=6 after setting valid CPU requests” to address that specific condition.

Question 434

At Northstar finance, in an isolated training cluster during a scheduled maintenance rehearsal: Deployment invoice-api in namespace ledger should autoscale between 2 and 6 replicas at 65% CPU utilization with metrics API available. Work only within the stated target and verify before declaring success. Which Kubernetes behavior best explains the required change or diagnosis?

  1. ConfigMaps hold ordinary configuration data; their existence does not automatically inject values into running Pods.
  2. HPA evaluates metrics relative to Pod resource requests; missing metrics or requests can leave desired replicas unknown.
  3. Kubernetes Secrets are API objects intended for sensitive values, but literals in a shell command can leak via shell history and process observation.
  4. CronJob suspension prevents new scheduled Jobs but does not terminate existing Jobs already running.

Explanation

Correct Answer

B:

HPA evaluates metrics relative to Pod resource requests; missing metrics or requests can leave desired replicas unknown. This explains the stated condition. The corresponding action is: Run kubectl -n ledger autoscale deployment invoice-api --cpu-percent=65 --min=2 --max=6 after setting valid CPU requests. The direct acceptance evidence is: Run kubectl -n ledger get hpa invoice-api and inspect observed utilization and replica bounds.

Incorrect Answers

A:

This principle describes a separate cause: ConfigMaps hold ordinary configuration data; their existence does not automatically inject values into running Pods. The reported condition is governed by: HPA evaluates metrics relative to Pod resource requests; missing metrics or requests can leave desired replicas unknown. The two mechanisms should not be conflated.

C:

The offered statement is true for this other mechanism: Kubernetes Secrets are API objects intended for sensitive values, but literals in a shell command can leak via shell history and process observation. It does not explain the facts described here, which follow from: HPA evaluates metrics relative to Pod resource requests; missing metrics or requests can leave desired replicas unknown.

D:

This principle describes a separate cause: CronJob suspension prevents new scheduled Jobs but does not terminate existing Jobs already running. The reported condition is governed by: HPA evaluates metrics relative to Pod resource requests; missing metrics or requests can leave desired replicas unknown. The two mechanisms should not be conflated.

Question 435

At Northstar finance, in an isolated training cluster during a scheduled maintenance rehearsal: Deployment invoice-api in namespace ledger should autoscale between 2 and 6 replicas at 65% CPU utilization with metrics API available. Work only within the stated target and verify before declaring success. Which observation best verifies the requested outcome rather than an unrelated state?

  1. Run kubectl -n ledger rollout status deployment/invoice-api and kubectl -n ledger get deployment invoice-api to compare desired and ready counts.
  2. Run kubectl -n ledger describe deployment invoice-api and inspect environment key references without printing secret values.
  3. Run kubectl -n ledger get hpa invoice-api and inspect observed utilization and replica bounds.
  4. Run kubectl -n fulfillment get deployment dispatch-api -o yaml and inspect resource requests and limits for each container.

Explanation

Correct Answer

C:

Run kubectl -n ledger get hpa invoice-api and inspect observed utilization and replica bounds. This validates the affected object or control path, rather than only showing a command completed. The underlying reason is: HPA evaluates metrics relative to Pod resource requests; missing metrics or requests can leave desired replicas unknown. The intended action is: Run kubectl -n ledger autoscale deployment invoice-api --cpu-percent=65 --min=2 --max=6 after setting valid CPU requests.

Incorrect Answers

A:

The alternative verifies a different condition: Scaling the Deployment changes desired replica count through its controller; editing an individual Pod would not preserve the desired state. The current case instead depends on: HPA evaluates metrics relative to Pod resource requests; missing metrics or requests can leave desired replicas unknown. Confirm that “Run kubectl -n ledger get hpa invoice-api and inspect observed utilization and replica bounds”.

B:

That test belongs to another control with this basis: Pod templates can reference Secret keys without copying literal secret values into the Deployment spec. In the current case, the governing reason is: HPA evaluates metrics relative to Pod resource requests; missing metrics or requests can leave desired replicas unknown. The direct verification is “Run kubectl -n ledger get hpa invoice-api and inspect observed utilization and replica bounds”.

D:

The alternative verifies a different condition: Requests inform scheduling and limits cap runtime consumption; the settings play different roles. The current case instead depends on: HPA evaluates metrics relative to Pod resource requests; missing metrics or requests can leave desired replicas unknown. Confirm that “Run kubectl -n ledger get hpa invoice-api and inspect observed utilization and replica bounds”.

Question 436

At Northstar finance, in an isolated training cluster during a scheduled maintenance rehearsal: Deployment invoice-api in namespace ledger should autoscale between 2 and 6 replicas at 65% CPU utilization with metrics API available. Work only within the stated target and verify before declaring success. Which operational control most directly prevents this failure or configuration drift?

  1. Use reviewed scaling boundaries and monitor HPA ownership before manual replica changes.
  2. Review resource sizing against actual usage and avoid scheduling on unsupported limits alone.
  3. Gate deployment promotion on observed rollout and readiness rather than API command exit alone.
  4. Track HPA metric availability and avoid simultaneous manual scaling policies that fight the controller.

Explanation

Correct Answer

D:

Track HPA metric availability and avoid simultaneous manual scaling policies that fight the controller. This reduces recurrence of the specific operational failure. It reinforces the action: Run kubectl -n ledger autoscale deployment invoice-api --cpu-percent=65 --min=2 --max=6 after setting valid CPU requests. The relevant mechanism is: HPA evaluates metrics relative to Pod resource requests; missing metrics or requests can leave desired replicas unknown.

Incorrect Answers

A:

That safeguard is relevant to: Scaling the Deployment changes desired replica count through its controller; editing an individual Pod would not preserve the desired state. The current failure instead follows from: HPA evaluates metrics relative to Pod resource requests; missing metrics or requests can leave desired replicas unknown. Its prevention measure is “Track HPA metric availability and avoid simultaneous manual scaling policies that fight the controller”.

B:

This routine guards against another mechanism: Requests inform scheduling and limits cap runtime consumption; the settings play different roles. The recurring exposure in the current case is: HPA evaluates metrics relative to Pod resource requests; missing metrics or requests can leave desired replicas unknown. The matching preventive check is “Track HPA metric availability and avoid simultaneous manual scaling policies that fight the controller”.

C:

The suggested review tracks a different technical risk: A successful API mutation does not guarantee updated Pods are healthy and available; rollout status tracks controller progress. Here the sustained control must address: HPA evaluates metrics relative to Pod resource requests; missing metrics or requests can leave desired replicas unknown. Choose “Track HPA metric availability and avoid simultaneous manual scaling policies that fight the controller”.

Question 437

At Horizon observability, in a disposable simulated environment during a monitored release window: Deployment metrics-api in namespace observability should autoscale between 3 and 8 replicas at 70% CPU utilization with metrics API available. Work only within the stated target and verify before declaring success. Which command or initial safe diagnostic step best addresses the stated lab task?

  1. Run kubectl -n observability patch deployment metrics-api --type=merge -p '{"spec":{"strategy":{"type":"RollingUpdate","rollingUpdate":{"maxUnavailable":0,"maxSurge":1}}}}'.
  2. Run kubectl -n observability autoscale deployment metrics-api --cpu-percent=70 --min=3 --max=8 after setting valid CPU requests.
  3. Run kubectl -n observability create secret generic lab-metrics-key --from-literal=TOKEN=dummy-demo-two for this disposable lab only.
  4. Run kubectl -n observability patch cronjob hourly-rollup --type=merge -p '{"spec":{"suspend":true}}'.

Explanation

Correct Answer

B:

Run kubectl -n observability autoscale deployment metrics-api --cpu-percent=70 --min=3 --max=8 after setting valid CPU requests. This is the appropriate command-line action or first safe diagnostic. The technical reason is: HPA evaluates metrics relative to Pod resource requests; missing metrics or requests can leave desired replicas unknown. Validate the result with: Run kubectl -n observability get hpa metrics-api and inspect observed utilization and replica bounds. Execute changes only in an authorized disposable lab or after normal production change controls.

Incorrect Answers

A:

This alternative is a response to another technical cause: Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement. The reported case instead depends on: HPA evaluates metrics relative to Pod resource requests; missing metrics or requests can leave desired replicas unknown. The action that directly addresses it is “Run kubectl -n observability autoscale deployment metrics-api --cpu-percent=70 --min=3 --max=8 after setting valid CPU requests”.

C:

The offered action targets: Kubernetes Secrets are API objects intended for sensitive values, but literals in a shell command can leak via shell history and process observation. The case facts point instead to: HPA evaluates metrics relative to Pod resource requests; missing metrics or requests can leave desired replicas unknown. Implement “Run kubectl -n observability autoscale deployment metrics-api --cpu-percent=70 --min=3 --max=8 after setting valid CPU requests” to address that specific condition.

D:

This alternative is a response to another technical cause: CronJob suspension prevents new scheduled Jobs but does not terminate existing Jobs already running. The reported case instead depends on: HPA evaluates metrics relative to Pod resource requests; missing metrics or requests can leave desired replicas unknown. The action that directly addresses it is “Run kubectl -n observability autoscale deployment metrics-api --cpu-percent=70 --min=3 --max=8 after setting valid CPU requests”.

Question 438

At Horizon observability, in a disposable simulated environment during a monitored release window: Deployment metrics-api in namespace observability should autoscale between 3 and 8 replicas at 70% CPU utilization with metrics API available. Work only within the stated target and verify before declaring success. Which Kubernetes behavior best explains the required change or diagnosis?

  1. Kubernetes Secrets are API objects intended for sensitive values, but literals in a shell command can leak via shell history and process observation.
  2. Rollout restart annotates the Pod template so the Deployment controller replaces Pods according to its rollout strategy.
  3. HPA evaluates metrics relative to Pod resource requests; missing metrics or requests can leave desired replicas unknown.
  4. A successful API mutation does not guarantee updated Pods are healthy and available; rollout status tracks controller progress.

Explanation

Correct Answer

C:

HPA evaluates metrics relative to Pod resource requests; missing metrics or requests can leave desired replicas unknown. This explains the stated condition. The corresponding action is: Run kubectl -n observability autoscale deployment metrics-api --cpu-percent=70 --min=3 --max=8 after setting valid CPU requests. The direct acceptance evidence is: Run kubectl -n observability get hpa metrics-api and inspect observed utilization and replica bounds.

Incorrect Answers

A:

Kubernetes Secrets are API objects intended for sensitive values, but literals in a shell command can leak via shell history and process observation. That explanation applies to a different technical failure. Here the controlling principle is: HPA evaluates metrics relative to Pod resource requests; missing metrics or requests can leave desired replicas unknown.

B:

The offered statement is true for this other mechanism: Rollout restart annotates the Pod template so the Deployment controller replaces Pods according to its rollout strategy. It does not explain the facts described here, which follow from: HPA evaluates metrics relative to Pod resource requests; missing metrics or requests can leave desired replicas unknown.

D:

A successful API mutation does not guarantee updated Pods are healthy and available; rollout status tracks controller progress. That explanation applies to a different technical failure. Here the controlling principle is: HPA evaluates metrics relative to Pod resource requests; missing metrics or requests can leave desired replicas unknown.

Question 439

At Horizon observability, in a disposable simulated environment during a monitored release window: Deployment metrics-api in namespace observability should autoscale between 3 and 8 replicas at 70% CPU utilization with metrics API available. Work only within the stated target and verify before declaring success. Which observation best verifies the requested outcome rather than an unrelated state?

  1. Run kubectl -n observability rollout status deployment/metrics-api and kubectl -n observability get deployment metrics-api to compare desired and ready counts.
  2. Run kubectl -n fulfillment get deployment dispatch-api and confirm updated and available replicas match the desired count.
  3. Run kubectl -n fulfillment get deployment dispatch-api -o yaml and inspect resource requests and limits for each container.
  4. Run kubectl -n observability get hpa metrics-api and inspect observed utilization and replica bounds.

Explanation

Correct Answer

D:

Run kubectl -n observability get hpa metrics-api and inspect observed utilization and replica bounds. This validates the affected object or control path, rather than only showing a command completed. The underlying reason is: HPA evaluates metrics relative to Pod resource requests; missing metrics or requests can leave desired replicas unknown. The intended action is: Run kubectl -n observability autoscale deployment metrics-api --cpu-percent=70 --min=3 --max=8 after setting valid CPU requests.

Incorrect Answers

A:

That test belongs to another control with this basis: Scaling the Deployment changes desired replica count through its controller; editing an individual Pod would not preserve the desired state. In the current case, the governing reason is: HPA evaluates metrics relative to Pod resource requests; missing metrics or requests can leave desired replicas unknown. The direct verification is “Run kubectl -n observability get hpa metrics-api and inspect observed utilization and replica bounds”.

B:

This observation would test a different technical dependency: A successful API mutation does not guarantee updated Pods are healthy and available; rollout status tracks controller progress. The current issue is governed by: HPA evaluates metrics relative to Pod resource requests; missing metrics or requests can leave desired replicas unknown. Its decisive check is “Run kubectl -n observability get hpa metrics-api and inspect observed utilization and replica bounds”.

C:

The alternative verifies a different condition: Requests inform scheduling and limits cap runtime consumption; the settings play different roles. The current case instead depends on: HPA evaluates metrics relative to Pod resource requests; missing metrics or requests can leave desired replicas unknown. Confirm that “Run kubectl -n observability get hpa metrics-api and inspect observed utilization and replica bounds”.

Question 440

At Horizon observability, in a disposable simulated environment during a monitored release window: Deployment metrics-api in namespace observability should autoscale between 3 and 8 replicas at 70% CPU utilization with metrics API available. Work only within the stated target and verify before declaring success. Which operational control most directly prevents this failure or configuration drift?

  1. Track HPA metric availability and avoid simultaneous manual scaling policies that fight the controller.
  2. Treat taints and tolerations as paired scheduling controls and review preexisting tolerations when patching arrays.
  3. Assess capacity for surge Pods and measure availability during upgrades.
  4. Use reviewed scaling boundaries and monitor HPA ownership before manual replica changes.

Explanation

Correct Answer

A:

Track HPA metric availability and avoid simultaneous manual scaling policies that fight the controller. This reduces recurrence of the specific operational failure. It reinforces the action: Run kubectl -n observability autoscale deployment metrics-api --cpu-percent=70 --min=3 --max=8 after setting valid CPU requests. The relevant mechanism is: HPA evaluates metrics relative to Pod resource requests; missing metrics or requests can leave desired replicas unknown.

Incorrect Answers

B:

The suggested review tracks a different technical risk: A toleration allows a Pod past a matching taint but does not ensure placement without node selection and capacity. Here the sustained control must address: HPA evaluates metrics relative to Pod resource requests; missing metrics or requests can leave desired replicas unknown. Choose “Track HPA metric availability and avoid simultaneous manual scaling policies that fight the controller”.

C:

That safeguard is relevant to: Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement. The current failure instead follows from: HPA evaluates metrics relative to Pod resource requests; missing metrics or requests can leave desired replicas unknown. Its prevention measure is “Track HPA metric availability and avoid simultaneous manual scaling policies that fight the controller”.

D:

This routine guards against another mechanism: Scaling the Deployment changes desired replica count through its controller; editing an individual Pod would not preserve the desired state. The recurring exposure in the current case is: HPA evaluates metrics relative to Pod resource requests; missing metrics or requests can leave desired replicas unknown. The matching preventive check is “Track HPA metric availability and avoid simultaneous manual scaling policies that fight the controller”.