Linux Fondation

Which resource do you use to attach a volume in a Pod?. StorageVolume. PersistentVolume. StorageClass. PersistentVolumeClaim.

Which of the following commands changes the number of days before the ext3 filesystem on /dev/sda1 has to run through a full filesystem check while booting?. tune2fs -d 200 /dev/sda1. tune2fs -c 200 /dev/sda1. tune2fs -n 200 /dev/sda1. tune2fs --days 200 /dev/sda1.

Which type of filesystem is created by mkfs when it is executed with the block device name only and without any additional parameters?. ext2. ext3. ext4. XFS. VFAT.

Which key-value store is used to persist Kubernetes cluster data?. etcd. ZooKeeper. ControlPlaneStore. Redis.

What Linux namespace is shared by default by containers running within a Kubernetes Pod?. Host Network. Network. Process ID. Process Name.

What is a Dockerfile?. A bash script that is used to automatically build a docker image. A config file that defines which image registry a container should be pushed to. A text file that contains all the commands a user could call on the command line to assemble an image. An image layer created by a running container stored on the host.

What does the "nodeSelector" within a PodSpec use to place Pods on the target nodes?. Annotations. IP Addresses. Hostnames. Labels.

What do Deployments and StatefulSets have in common?. They manage Pods that are based on an identical container spec. They support the OnDelete update strategy. They support an ordered, graceful deployment and scaling. They maintain a sticky identity for each of their Pods.

What is the practice of bringing financial accountability to the variable spend model of cloud resources?. FaaS. DevOps. CloudCost. FinOps.

What is a best practice to minimize the container image size?. Use a DockerFile. Use multistage builds. Build images with different tags. Add a build.sh script.

Which tools enable Kubernetes HorizontalPodAutoscalers to use custom, application-generated metrics to trigger scaling events?. Prometheus and the prometheus-adapter. Graylog and graylog-autoscaler metrics. Graylog and the kubernetes-adapter. Grafana and Prometheus.

Which of the following is a valid PromQL query?. SELECT * from http_requests_total WHERE job=apiserver. http_requests_total WHERE (job="apiserver"). SELECT * from http_requests_total. http_requests_total(job="apiserver").

Which of the following best describes horizontally scaling an application deployment?. The act of adding/removing node instances to the cluster to meet demand. The act of adding/removing applications to meet demand. The act of adding/removing application instances of the same application to meet demand. The act of adding/removing resources to application instances to meet demand.

How many different Kubernetes service types can you define?. 2. 3. 4. 5.

What is the difference between a Deployment and a ReplicaSet?. With a Deployment, you can’t control the number of pod replicas. A ReplicaSet does not guarantee a stable set of replica pods running. A Deployment is basically the same as a ReplicaSet with annotations. A Deployment is a higher-level concept that manages ReplicaSets.

The Container Runtime Interface (CRI) defines the protocol for the communication between: The kubelet and the container runtime. The container runtime and etcd. The kube-apiserver and the kubelet. The container runtime and the image registry.

Which authorization-mode allows granular control over the operations that different entities can perform on different objects in a Kubernetes cluster?. Webhook Mode Authorization Control. Role Based Access Control. Node Authorization Access Control. Attribute Based Access Control.

Which of the following commands set the sticky bit for the directory /tmp? (Choose TWO correct answers.). chmod +s /tmp. chmod +t /tmp. chmod 1775 /tmp. chmod 4775 /tmp. chmod 2775 /tmp.

Which of the following commands can be used to display the inode number of a given file?. inode. ls. ln. cp.

Which of the following commands shows the definition of a given shell command?. where. stat. type. case.

What do the permissions -rwSr-xr-x mean for a binary file when it is executed as a command?. The command is SetUID and it will be executed with the effective rights of the owner. The command will be executed with the effective rights of the group instead of the owner. The execute flag is not set for the owner. Therefore the SetUID flag is ignored. The command will be executed with the effective rights of the owner and group.

What is a Pod?. A networked application within Kubernetes. A storage volume within Kubernetes. A single container within Kubernetes. A group of one or more containers within Kubernetes.

What output will the following command sequence produce? echo '1 2 3 4 5 6' | while read a b c; do echo result: $c $b $a; done. result: 3 4 5 6 2 1. result: 1 2 3 4 5 6. result: 6 5 4. result: 6 5 4 3 2 1. result: 3 2 1.

When the command echo $ outputs 1, which of the following statements is true?. It is the process ID of the echo command. It is the process ID of the current shell. It is the exit value of the command executed immediately before echo. It is the exit value of the echo command.

In the DevOps framework and culture, who builds, automates, and offers continuous delivery tools for developer teams?. Application Users. Application Developers. Platform Engineers. Cluster Operators.

Which kubectl command is useful for collecting information about any type of resource that is active in a Kubernetes cluster?. describe. list. expose. explain.

The cloud native architecture centered around microservices provides a strong system that ensures ______________. fallback. resiliency. failover. high reachability.

Which of the following is the correct command to run a nginx deployment with 2 replicas?. kubectl run deploy nginx --image=nginx --replicas=2. kubectl create deploy nginx --image=nginx --replicas=2. kubectl create nginx deployment --image=nginx –replicas=2. kubectl create deploy nginx --image=nginx --count=2.

What does "Continuous Integration" mean?. The continuous integration and testing of code changes from multiple sources manually. The continuous integration and testing of code changes from multiple sources via automation. The continuous integration of changes from one environment to another. The continuous integration of new tools to support developers in a project.

Which of the following options is true about considerations for large Kubernetes clusters?. Kubernetes supports up to 1000 nodes and recommends no more than 1000 containers per node. Kubernetes supports up to 5000 nodes and recommends no more than 500 pods per node. Kubernetes supports up to 5000 nodes and recommends no more than 110 pods per node. Kubernetes supports up to 50 nodes and recommends no more than 1000 containers per node.

Which of the following commands puts the output of the command date into the shell variable mydate?. mydate="$(date)". mydate="exec date". mydate="$((date))". mydate="date". mydate="${date}".

Which of the following files, when existing, affect the behavior of the Bash shell? (Choose TWO correct answers.). ~/.bashconf. ~/.bashrc. ~/.bashdefaults. ~/.bash_etc. ~/.bash_profile.

What is the difference between the commands test -e path and test -f path?. They are equivalent options with the same behavior. The -f option tests for a regular file. The -e option tests for an empty file. Both options check the existence of the path. The -f option also confirms that it is a regular file. The -f option tests for a regular file. The -e option tests for an executable file.

How can the existing environment variable FOOBAR be suppressed for the execution of the script./myscript only?. unset -v FOOBAR;./myscript. set -a FOOBAR="";./myscript. env -u FOOBAR./myscript. env -i FOOBAR./myscript.

What is the reference implementation of the OCI runtime specification?. lxc. cri-o. runc. docker.

What is a Service?. A static network mapping from a Pod to a port. A way to expose an application running on a set of Pods. The network configuration for a group of Pods. An NGINX load balancer that gets deployed for an application.

What's the difference between a security profile and a security context?. Security Contexts configure Clusters and Namespaces at runtime. Security profiles are control plane mechanisms to enforce specific settings in the Security Context. Security Contexts configure Pods and Containers at runtime. Security profiles are control plane mechanisms to enforce specific settings in the Security Context. Security Profiles configure Pods and Containers at runtime. Security Contexts are control plane mechanisms to enforce specific settings in the Security Profile. Security Profiles configure Clusters and Namespaces at runtime. Security Contexts are control plane mechanisms to enforce specific settings in the Security Profile.

At which layer would distributed tracing be implemented in a cloud native deployment?. Network. Application. Database. Infrastructure.

What framework does Kubernetes use to authenticate users with JSON Web Tokens?. OpenID Connect. OpenID Container. OpenID Cluster. OpenID CNCF.

Which of the following is a feature Kubernetes provides by default as a container orchestration tool?. A portable operating system. File system redundancy. A container image registry. Automated rollouts and rollbacks.

Which of the following sentences is true about container runtimes in Kubernetes?. If you let iptables see bridged traffic, you don't need a container runtime. If you enable IPv4 forwarding, you don't need a container runtime. Container runtimes are deprecated, you must install CRI on each node. You must install a container runtime on each node to run pods on it.

If a Pod was waiting for container images to download on the scheduled node, what state would it be in?. Failed. Succeeded. Unknown. Pending.

Imagine you're releasing open-source software for the first time. Which of the following is a valid semantic version?. 1.0. 2021-10-11. 0.1.0-rc. v1beta1.

Which item is a Kubernetes node component?. kube-scheduler. kubectl. kube-proxy. etcd.

How is application data maintained in containers. By using persistent storage or volumes outside the container filesystem. By storing data only inside the container filesystem (ephemeral storage). By manually copying data to the host machine every time the container stops. By relying on container memory to retain data after restart.

Which of the following scenarios would benefit the most from a service mesh architecture?. A few applications with hundreds of pod replicas running in multiple clusters, each one providing multiple services. Thousands of distributed applications running in a single cluster, each one providing multiple services. Tens of distributed applications running in multiple clusters, each one providing multiple services. Thousands of distributed applications running in multiple clusters, each one providing multiple services.

Kubernetes___ protect you against voluntary interruptions (such as deleting Pods, draining nodes) to run applications in a highly available manner. Pod Topology Spread Constraints. Pod Disruption Budgets. Taints and Tolerances. Resource Limits and Requests.

What sentence is true about CronJobs in Kubernetes?. CronJob runs a job only once when the cluster starts. CronJob creates one or multiple Jobs on a repeating schedule. CronJob is used to manage container images in the registry. CronJob automatically scales pods based on CPU usage.

Question: What is the purpose of the kube-proxy?. The kube-proxy balances network requests to Pods. The kube-proxy maintains network rules on nodes. The kube-proxy handles communication between the API server and the kubelet. The kube-proxy manages container runtime operations on each node.

Manual reclamation policy of a PVC resource is known as: claimRef. Delete. Retain. Recycle.