McAfee Secure

CNCF CKA Bundle

Exam Code: CKA

Exam Name Certified Kubernetes Administrator

Certification Provider: CNCF

Corresponding Certification: CKA

CNCF CKA Bundle $44.99

100% CNCF CKA Guaranteed Success With Testking Training Materials

Get Real CKA Exam Questions & Expert Verified Answers as Experienced on the Real Exam!

  • Questions & Answers

    CKA Questions & Answers

    58 Questions & Answers

    The ultimate exam preparation tool, Questions & Answers mirrors the actual CKA exam while allowing you to hone and measure every aspect of your test-taking ability.

  • CKA Video Course

    CKA Training Course

    138 Video Lectures

    CKA Video Course is developed by CNCF Professionals to help you pass the CKA exam.

    Description

    This course will improve your knowledge and skills required to pass Certified Kubernetes Administrator exam.
  • Study Guide

    CKA Study Guide

    268 PDF Pages

    Developed by industry experts, this 268-page guide spells out in painstaking detail all of the information you need to ace CKA exam.

Certified Kubernetes Administrator (CKA) Practice Tests

Satisfaction Guaranteed

Money Back Guarantee

Testking provides hassle-free money back guarantee with our products. That is because we have 100% trust in the abilities of our professional and experience product team, and our record is a proof of that.

99.6% PASS RATE
Total Cost: $194.97
Bundle Price: $149.98

Purchase Individually

  • Questions & Answers

    Questions & Answers

    58 Questions

    $124.99
  • CKA Video Course

    Training Course

    138 Video Lectures

    $39.99
  • Study Guide

    Study Guide

    268 PDF Pages

    $29.99

CNCF CKA Practice Test 48

Question 470

At Northstar finance, in an isolated training cluster during a scheduled maintenance rehearsal: Deployment invoice-api in ledger requires maxUnavailable=0 and maxSurge=1 for a RollingUpdate rollout in the lab. Work only within the stated target and verify before declaring success. Which Kubernetes behavior best explains the required change or diagnosis?

  1. Node selectors constrain scheduling to nodes whose labels match all specified key/value pairs; patching the Pod template triggers a rollout.
  2. Environment variables are copied into new container processes from ConfigMap values; existing running processes need replacement to pick up changes.
  3. Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement.
  4. Kubernetes Secrets are API objects intended for sensitive values, but literals in a shell command can leak via shell history and process observation.

Explanation

Correct Answer

C:

Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement. This explains the stated condition. The corresponding action is: Run kubectl -n ledger patch deployment invoice-api --type=merge -p '{"spec":{"strategy":{"type":"RollingUpdate","rollingUpdate":{"maxUnavailable":0,"maxSurge":1}}}}'. The direct acceptance evidence is: Run kubectl -n ledger get deployment invoice-api -o jsonpath='{.spec.strategy.rollingUpdate}' and verify the values.

Incorrect Answers

A:

This principle describes a separate cause: Node selectors constrain scheduling to nodes whose labels match all specified key/value pairs; patching the Pod template triggers a rollout. The reported condition is governed by: Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement. The two mechanisms should not be conflated.

B:

Environment variables are copied into new container processes from ConfigMap values; existing running processes need replacement to pick up changes. That explanation applies to a different technical failure. Here the controlling principle is: Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement.

D:

This principle describes a separate cause: Kubernetes Secrets are API objects intended for sensitive values, but literals in a shell command can leak via shell history and process observation. The reported condition is governed by: Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement. The two mechanisms should not be conflated.

Question 471

At Northstar finance, in an isolated training cluster during a scheduled maintenance rehearsal: Deployment invoice-api in ledger requires maxUnavailable=0 and maxSurge=1 for a RollingUpdate rollout in the lab. Work only within the stated target and verify before declaring success. Which observation best verifies the requested outcome rather than an unrelated state?

  1. Run kubectl -n ledger get deployment invoice-api -o jsonpath='{.spec.template.spec.nodeSelector}' and check Pod placements.
  2. Run kubectl -n ledger get deployment invoice-api -o yaml and inspect spec.template.spec.tolerations before testing scheduling.
  3. Run kubectl -n ledger get deployment invoice-api and confirm updated and available replicas match the desired count.
  4. Run kubectl -n ledger get deployment invoice-api -o jsonpath='{.spec.strategy.rollingUpdate}' and verify the values.

Explanation

Correct Answer

D:

Run kubectl -n ledger get deployment invoice-api -o jsonpath='{.spec.strategy.rollingUpdate}' and verify the values. This validates the affected object or control path, rather than only showing a command completed. The underlying reason is: Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement. The intended action is: Run kubectl -n ledger patch deployment invoice-api --type=merge -p '{"spec":{"strategy":{"type":"RollingUpdate","rollingUpdate":{"maxUnavailable":0,"maxSurge":1}}}}'.

Incorrect Answers

A:

The alternative verifies a different condition: Node selectors constrain scheduling to nodes whose labels match all specified key/value pairs; patching the Pod template triggers a rollout. The current case instead depends on: Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement. Confirm that “Run kubectl -n ledger get deployment invoice-api -o jsonpath='{.spec.strategy.rollingUpdate}' and verify the values”.

B:

That test belongs to another control with this basis: A toleration allows a Pod past a matching taint but does not ensure placement without node selection and capacity. In the current case, the governing reason is: Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement. The direct verification is “Run kubectl -n ledger get deployment invoice-api -o jsonpath='{.spec.strategy.rollingUpdate}' and verify the values”.

C:

This observation would test a different technical dependency: A successful API mutation does not guarantee updated Pods are healthy and available; rollout status tracks controller progress. The current issue is governed by: Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement. Its decisive check is “Run kubectl -n ledger get deployment invoice-api -o jsonpath='{.spec.strategy.rollingUpdate}' and verify the values”.

Question 472

At Northstar finance, in an isolated training cluster during a scheduled maintenance rehearsal: Deployment invoice-api in ledger requires maxUnavailable=0 and maxSurge=1 for a RollingUpdate rollout in the lab. Work only within the stated target and verify before declaring success. Which operational control most directly prevents this failure or configuration drift?

  1. Assess capacity for surge Pods and measure availability during upgrades.
  2. Review resource sizing against actual usage and avoid scheduling on unsupported limits alone.
  3. Retain meaningful revisions and perform health checks after every rollback.
  4. Pin reviewed image tags or digests and retain rollout history for recovery.

Explanation

Correct Answer

A:

Assess capacity for surge Pods and measure availability during upgrades. This reduces recurrence of the specific operational failure. It reinforces the action: Run kubectl -n ledger patch deployment invoice-api --type=merge -p '{"spec":{"strategy":{"type":"RollingUpdate","rollingUpdate":{"maxUnavailable":0,"maxSurge":1}}}}'. The relevant mechanism is: Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement.

Incorrect Answers

B:

This routine guards against another mechanism: Requests inform scheduling and limits cap runtime consumption; the settings play different roles. The recurring exposure in the current case is: Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement. The matching preventive check is “Assess capacity for surge Pods and measure availability during upgrades”.

C:

The suggested review tracks a different technical risk: A Deployment tracks ReplicaSet revisions and rollout undo restores a recorded earlier Pod template. Here the sustained control must address: Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement. Choose “Assess capacity for surge Pods and measure availability during upgrades”.

D:

That safeguard is relevant to: Updating a Deployment Pod template triggers a controlled rollout; restarting Pods alone will not change the image reference. The current failure instead follows from: Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement. Its prevention measure is “Assess capacity for surge Pods and measure availability during upgrades”.

Question 473

At Horizon observability, in a disposable simulated environment during a monitored release window: Deployment metrics-api in observability requires maxUnavailable=0 and maxSurge=1 for a RollingUpdate rollout in the lab. Work only within the stated target and verify before declaring success. Which command or initial safe diagnostic step best addresses the stated lab task?

  1. Run kubectl -n observability patch cronjob hourly-rollup --type=merge -p '{"spec":{"suspend":true}}'.
  2. Run kubectl -n fulfillment patch deployment dispatch-api --type=merge -p '{"spec":{"template":{"spec":{"nodeSelector":{"workload":"restricted"}}}}}'.
  3. Run kubectl -n observability patch deployment metrics-api --type=merge -p '{"spec":{"strategy":{"type":"RollingUpdate","rollingUpdate":{"maxUnavailable":0,"maxSurge":1}}}}'.
  4. Run kubectl -n observability rollout restart deployment/metrics-api.

Explanation

Correct Answer

C:

Run kubectl -n observability patch deployment metrics-api --type=merge -p '{"spec":{"strategy":{"type":"RollingUpdate","rollingUpdate":{"maxUnavailable":0,"maxSurge":1}}}}'. This is the appropriate command-line action or first safe diagnostic. The technical reason is: Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement. Validate the result with: Run kubectl -n observability get deployment metrics-api -o jsonpath='{.spec.strategy.rollingUpdate}' and verify the values. Execute changes only in an authorized disposable lab or after normal production change controls.

Incorrect Answers

A:

This alternative is a response to another technical cause: CronJob suspension prevents new scheduled Jobs but does not terminate existing Jobs already running. The reported case instead depends on: Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement. The action that directly addresses it is “Run kubectl -n observability patch deployment metrics-api --type=merge -p '{"spec":{"strategy":{"type":"RollingUpdate","rollingUpdate":{"maxUnavailable":0,"maxSurge":1}}}}'”.

B:

The proposed action belongs to the mechanism: Node selectors constrain scheduling to nodes whose labels match all specified key/value pairs; patching the Pod template triggers a rollout. Here the stated fault follows a different mechanism: Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement. The corrective choice is “Run kubectl -n observability patch deployment metrics-api --type=merge -p '{"spec":{"strategy":{"type":"RollingUpdate","rollingUpdate":{"maxUnavailable":0,"maxSurge":1}}}}'”.

D:

This alternative is a response to another technical cause: Rollout restart annotates the Pod template so the Deployment controller replaces Pods according to its rollout strategy. The reported case instead depends on: Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement. The action that directly addresses it is “Run kubectl -n observability patch deployment metrics-api --type=merge -p '{"spec":{"strategy":{"type":"RollingUpdate","rollingUpdate":{"maxUnavailable":0,"maxSurge":1}}}}'”.

Question 474

At Horizon observability, in a disposable simulated environment during a monitored release window: Deployment metrics-api in observability requires maxUnavailable=0 and maxSurge=1 for a RollingUpdate rollout in the lab. Work only within the stated target and verify before declaring success. Which Kubernetes behavior best explains the required change or diagnosis?

  1. Scaling the Deployment changes desired replica count through its controller; editing an individual Pod would not preserve the desired state.
  2. HPA evaluates metrics relative to Pod resource requests; missing metrics or requests can leave desired replicas unknown.
  3. A successful API mutation does not guarantee updated Pods are healthy and available; rollout status tracks controller progress.
  4. Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement.

Explanation

Correct Answer

D:

Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement. This explains the stated condition. The corresponding action is: Run kubectl -n observability patch deployment metrics-api --type=merge -p '{"spec":{"strategy":{"type":"RollingUpdate","rollingUpdate":{"maxUnavailable":0,"maxSurge":1}}}}'. The direct acceptance evidence is: Run kubectl -n observability get deployment metrics-api -o jsonpath='{.spec.strategy.rollingUpdate}' and verify the values.

Incorrect Answers

A:

Scaling the Deployment changes desired replica count through its controller; editing an individual Pod would not preserve the desired state. That explanation applies to a different technical failure. Here the controlling principle is: Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement.

B:

The offered statement is true for this other mechanism: HPA evaluates metrics relative to Pod resource requests; missing metrics or requests can leave desired replicas unknown. It does not explain the facts described here, which follow from: Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement.

C:

This principle describes a separate cause: A successful API mutation does not guarantee updated Pods are healthy and available; rollout status tracks controller progress. The reported condition is governed by: Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement. The two mechanisms should not be conflated.

Question 475

At Horizon observability, in a disposable simulated environment during a monitored release window: Deployment metrics-api in observability requires maxUnavailable=0 and maxSurge=1 for a RollingUpdate rollout in the lab. Work only within the stated target and verify before declaring success. Which observation best verifies the requested outcome rather than an unrelated state?

  1. Run kubectl -n observability get deployment metrics-api -o jsonpath='{.spec.strategy.rollingUpdate}' and verify the values.
  2. Run kubectl -n observability get cronjob hourly-rollup -o jsonpath='{.spec.suspend}' and verify true.
  3. Run kubectl -n observability get configmap metrics-config -o jsonpath='{.data.MODE}' and confirm the declared value.
  4. Run kubectl -n ledger get deployment invoice-api -o jsonpath='{.spec.template.spec.nodeSelector}' and check Pod placements.

Explanation

Correct Answer

A:

Run kubectl -n observability get deployment metrics-api -o jsonpath='{.spec.strategy.rollingUpdate}' and verify the values. This validates the affected object or control path, rather than only showing a command completed. The underlying reason is: Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement. The intended action is: Run kubectl -n observability patch deployment metrics-api --type=merge -p '{"spec":{"strategy":{"type":"RollingUpdate","rollingUpdate":{"maxUnavailable":0,"maxSurge":1}}}}'.

Incorrect Answers

B:

This observation would test a different technical dependency: CronJob suspension prevents new scheduled Jobs but does not terminate existing Jobs already running. The current issue is governed by: Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement. Its decisive check is “Run kubectl -n observability get deployment metrics-api -o jsonpath='{.spec.strategy.rollingUpdate}' and verify the values”.

C:

The alternative verifies a different condition: ConfigMaps hold ordinary configuration data; their existence does not automatically inject values into running Pods. The current case instead depends on: Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement. Confirm that “Run kubectl -n observability get deployment metrics-api -o jsonpath='{.spec.strategy.rollingUpdate}' and verify the values”.

D:

That test belongs to another control with this basis: Node selectors constrain scheduling to nodes whose labels match all specified key/value pairs; patching the Pod template triggers a rollout. In the current case, the governing reason is: Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement. The direct verification is “Run kubectl -n observability get deployment metrics-api -o jsonpath='{.spec.strategy.rollingUpdate}' and verify the values”.

Question 476

At Horizon observability, in a disposable simulated environment during a monitored release window: Deployment metrics-api in observability requires maxUnavailable=0 and maxSurge=1 for a RollingUpdate rollout in the lab. Work only within the stated target and verify before declaring success. Which operational control most directly prevents this failure or configuration drift?

  1. Treat taints and tolerations as paired scheduling controls and review preexisting tolerations when patching arrays.
  2. Assess capacity for surge Pods and measure availability during upgrades.
  3. Check disruption budgets and readiness behavior before application restarts.
  4. Track whether consumers use environment variables or mounted files when planning ConfigMap refreshes.

Explanation

Correct Answer

B:

Assess capacity for surge Pods and measure availability during upgrades. This reduces recurrence of the specific operational failure. It reinforces the action: Run kubectl -n observability patch deployment metrics-api --type=merge -p '{"spec":{"strategy":{"type":"RollingUpdate","rollingUpdate":{"maxUnavailable":0,"maxSurge":1}}}}'. The relevant mechanism is: Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement.

Incorrect Answers

A:

This routine guards against another mechanism: A toleration allows a Pod past a matching taint but does not ensure placement without node selection and capacity. The recurring exposure in the current case is: Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement. The matching preventive check is “Assess capacity for surge Pods and measure availability during upgrades”.

C:

That safeguard is relevant to: Rollout restart annotates the Pod template so the Deployment controller replaces Pods according to its rollout strategy. The current failure instead follows from: Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement. Its prevention measure is “Assess capacity for surge Pods and measure availability during upgrades”.

D:

This routine guards against another mechanism: Environment variables are copied into new container processes from ConfigMap values; existing running processes need replacement to pick up changes. The recurring exposure in the current case is: Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement. The matching preventive check is “Assess capacity for surge Pods and measure availability during upgrades”.

Question 477

At Pinecrest logistics, in a sandbox Kubernetes cluster during a recovery tabletop exercise: Deployment dispatch-api in fulfillment requires maxUnavailable=0 and maxSurge=1 for a RollingUpdate rollout in the lab. Work only within the stated target and verify before declaring success. Which command or initial safe diagnostic step best addresses the stated lab task?

  1. Run kubectl -n observability rollout restart deployment/metrics-api.
  2. Run kubectl -n fulfillment rollout status deployment/dispatch-api --timeout=120s.
  3. Run kubectl -n ledger patch deployment invoice-api --type=merge -p '{"spec":{"template":{"spec":{"nodeSelector":{"workload":"restricted"}}}}}'.
  4. Run kubectl -n fulfillment patch deployment dispatch-api --type=merge -p '{"spec":{"strategy":{"type":"RollingUpdate","rollingUpdate":{"maxUnavailable":0,"maxSurge":1}}}}'.

Explanation

Correct Answer

D:

Run kubectl -n fulfillment patch deployment dispatch-api --type=merge -p '{"spec":{"strategy":{"type":"RollingUpdate","rollingUpdate":{"maxUnavailable":0,"maxSurge":1}}}}'. This is the appropriate command-line action or first safe diagnostic. The technical reason is: Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement. Validate the result with: Run kubectl -n fulfillment get deployment dispatch-api -o jsonpath='{.spec.strategy.rollingUpdate}' and verify the values. Execute changes only in an authorized disposable lab or after normal production change controls.

Incorrect Answers

A:

The proposed action belongs to the mechanism: Rollout restart annotates the Pod template so the Deployment controller replaces Pods according to its rollout strategy. Here the stated fault follows a different mechanism: Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement. The corrective choice is “Run kubectl -n fulfillment patch deployment dispatch-api --type=merge -p '{"spec":{"strategy":{"type":"RollingUpdate","rollingUpdate":{"maxUnavailable":0,"maxSurge":1}}}}'”.

B:

The offered action targets: A successful API mutation does not guarantee updated Pods are healthy and available; rollout status tracks controller progress. The case facts point instead to: Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement. Implement “Run kubectl -n fulfillment patch deployment dispatch-api --type=merge -p '{"spec":{"strategy":{"type":"RollingUpdate","rollingUpdate":{"maxUnavailable":0,"maxSurge":1}}}}'” to address that specific condition.

C:

This alternative is a response to another technical cause: Node selectors constrain scheduling to nodes whose labels match all specified key/value pairs; patching the Pod template triggers a rollout. The reported case instead depends on: Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement. The action that directly addresses it is “Run kubectl -n fulfillment patch deployment dispatch-api --type=merge -p '{"spec":{"strategy":{"type":"RollingUpdate","rollingUpdate":{"maxUnavailable":0,"maxSurge":1}}}}'”.

Question 478

At Pinecrest logistics, in a sandbox Kubernetes cluster during a recovery tabletop exercise: Deployment dispatch-api in fulfillment requires maxUnavailable=0 and maxSurge=1 for a RollingUpdate rollout in the lab. Work only within the stated target and verify before declaring success. Which Kubernetes behavior best explains the required change or diagnosis?

  1. Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement.
  2. A successful API mutation does not guarantee updated Pods are healthy and available; rollout status tracks controller progress.
  3. Node selectors constrain scheduling to nodes whose labels match all specified key/value pairs; patching the Pod template triggers a rollout.
  4. Pod templates can reference Secret keys without copying literal secret values into the Deployment spec.

Explanation

Correct Answer

A:

Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement. This explains the stated condition. The corresponding action is: Run kubectl -n fulfillment patch deployment dispatch-api --type=merge -p '{"spec":{"strategy":{"type":"RollingUpdate","rollingUpdate":{"maxUnavailable":0,"maxSurge":1}}}}'. The direct acceptance evidence is: Run kubectl -n fulfillment get deployment dispatch-api -o jsonpath='{.spec.strategy.rollingUpdate}' and verify the values.

Incorrect Answers

B:

This principle describes a separate cause: A successful API mutation does not guarantee updated Pods are healthy and available; rollout status tracks controller progress. The reported condition is governed by: Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement. The two mechanisms should not be conflated.

C:

Node selectors constrain scheduling to nodes whose labels match all specified key/value pairs; patching the Pod template triggers a rollout. That explanation applies to a different technical failure. Here the controlling principle is: Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement.

D:

The offered statement is true for this other mechanism: Pod templates can reference Secret keys without copying literal secret values into the Deployment spec. It does not explain the facts described here, which follow from: Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement.

Question 479

At Pinecrest logistics, in a sandbox Kubernetes cluster during a recovery tabletop exercise: Deployment dispatch-api in fulfillment requires maxUnavailable=0 and maxSurge=1 for a RollingUpdate rollout in the lab. Work only within the stated target and verify before declaring success. Which observation best verifies the requested outcome rather than an unrelated state?

  1. Run kubectl -n fulfillment get deployment dispatch-api -o yaml and inspect resource requests and limits for each container.
  2. Run kubectl -n fulfillment get deployment dispatch-api -o jsonpath='{.spec.strategy.rollingUpdate}' and verify the values.
  3. Run kubectl -n ledger get deployment invoice-api -o jsonpath='{.spec.template.spec.nodeSelector}' and check Pod placements.
  4. Run kubectl -n fulfillment get deployment dispatch-api and confirm updated and available replicas match the desired count.

Explanation

Correct Answer

B:

Run kubectl -n fulfillment get deployment dispatch-api -o jsonpath='{.spec.strategy.rollingUpdate}' and verify the values. This validates the affected object or control path, rather than only showing a command completed. The underlying reason is: Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement. The intended action is: Run kubectl -n fulfillment patch deployment dispatch-api --type=merge -p '{"spec":{"strategy":{"type":"RollingUpdate","rollingUpdate":{"maxUnavailable":0,"maxSurge":1}}}}'.

Incorrect Answers

A:

This observation would test a different technical dependency: Requests inform scheduling and limits cap runtime consumption; the settings play different roles. The current issue is governed by: Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement. Its decisive check is “Run kubectl -n fulfillment get deployment dispatch-api -o jsonpath='{.spec.strategy.rollingUpdate}' and verify the values”.

C:

That test belongs to another control with this basis: Node selectors constrain scheduling to nodes whose labels match all specified key/value pairs; patching the Pod template triggers a rollout. In the current case, the governing reason is: Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement. The direct verification is “Run kubectl -n fulfillment get deployment dispatch-api -o jsonpath='{.spec.strategy.rollingUpdate}' and verify the values”.

D:

This observation would test a different technical dependency: A successful API mutation does not guarantee updated Pods are healthy and available; rollout status tracks controller progress. The current issue is governed by: Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement. Its decisive check is “Run kubectl -n fulfillment get deployment dispatch-api -o jsonpath='{.spec.strategy.rollingUpdate}' and verify the values”.

Question 480

At Pinecrest logistics, in a sandbox Kubernetes cluster during a recovery tabletop exercise: Deployment dispatch-api in fulfillment requires maxUnavailable=0 and maxSurge=1 for a RollingUpdate rollout in the lab. Work only within the stated target and verify before declaring success. Which operational control most directly prevents this failure or configuration drift?

  1. Use reviewed scaling boundaries and monitor HPA ownership before manual replica changes.
  2. Review resource sizing against actual usage and avoid scheduling on unsupported limits alone.
  3. Assess capacity for surge Pods and measure availability during upgrades.
  4. Version nonsecret application settings and avoid putting credentials into ConfigMaps.

Explanation

Correct Answer

C:

Assess capacity for surge Pods and measure availability during upgrades. This reduces recurrence of the specific operational failure. It reinforces the action: Run kubectl -n fulfillment patch deployment dispatch-api --type=merge -p '{"spec":{"strategy":{"type":"RollingUpdate","rollingUpdate":{"maxUnavailable":0,"maxSurge":1}}}}'. The relevant mechanism is: Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement.

Incorrect Answers

A:

The suggested review tracks a different technical risk: Scaling the Deployment changes desired replica count through its controller; editing an individual Pod would not preserve the desired state. Here the sustained control must address: Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement. Choose “Assess capacity for surge Pods and measure availability during upgrades”.

B:

That safeguard is relevant to: Requests inform scheduling and limits cap runtime consumption; the settings play different roles. The current failure instead follows from: Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement. Its prevention measure is “Assess capacity for surge Pods and measure availability during upgrades”.

D:

The suggested review tracks a different technical risk: ConfigMaps hold ordinary configuration data; their existence does not automatically inject values into running Pods. Here the sustained control must address: Deployment rolling-update parameters govern how many old Pods may be unavailable and extra Pods may be created during replacement. Choose “Assess capacity for surge Pods and measure availability during upgrades”.