Expert Kubernetes quiz
A free expert Kubernetes quiz with up to 40 multiple-choice questions on Pods, Deployments, Services, scheduling, storage, networking, security and kubectl. Written for engineers who run it in production, with an explanation for every answer.
Loading Quiz...
Preparing your Kubernetes Expert level questions
Browse the 20 hard Kubernetes questions, with answers
- What is a Kubernetes Operator?
- What is a Kubernetes Admission Controller?
- What is a Kubernetes Custom Resource Definition (CRD)?
- What is a Kubernetes PodDisruptionBudget used for?
- What is the purpose of a Kubernetes ValidatingWebhookConfiguration?
- What is the purpose of a Kubernetes PriorityClass?
- What is the purpose of a Kubernetes MutatingWebhookConfiguration?
- Every container in a pod sets CPU and memory limits but no requests. What QoS class does the pod get?
- A container keeps trying to use more CPU than its CPU limit. What happens?
- A pod was scheduled using a requiredDuringSchedulingIgnoredDuringExecution node affinity rule. Later someone removes the matching label from the node. What happens to the pod?
- A node gets a NoExecute taint. A pod already running on it tolerates the taint with tolerationSeconds: 300. What happens?
- What does a DNS lookup of a headless Service (clusterIP: None) with a selector return?
- What does externalTrafficPolicy: Local do on a NodePort or LoadBalancer Service?
- In a NetworkPolicy ingress rule, what is the difference between putting namespaceSelector and podSelector in the same 'from' entry and putting them in two separate entries?
- Two controllers read the same Deployment and both send an update based on what they read. How does the API server stop the second update from silently overwriting the first?
- A namespace has been stuck in Terminating for hours. What is the most likely cause?
- What does podManagementPolicy: Parallel change in a StatefulSet?
- What does volumeBindingMode: WaitForFirstConsumer on a StorageClass do?
- A slow-starting application is killed by its liveness probe before it finishes starting. What is the recommended fix?
- Which Pod Security Standards level requires pods to run as non-root, drop ALL capabilities, and use a seccomp profile?