CKA試験問題集を使って一日でKubernetes Administrator試験合格目指す（最新の68解答) [Q10-Q30]

新問題 10
Create a file:
/opt/KUCC00302/kucc00302.txt that lists all pods that implement service in namespace development.
The format of the file should be one pod name per line.

新問題 11
Create a pod with image nginx called nginx and allow traffic on port 80

新問題 12
Get list of all pods in all namespaces and write it to file “/opt/pods-list.yaml”

新問題 13
Create an nginx pod with containerPort 80 and with a PersistentVolumeClaim “task-pv-claim” and has a mouth path “/usr/share/nginx/html”

vim nginx-pvc-pod.yaml
apiVersion: v1
kind: Pod
metadata:
name: task-pv-pod
spec:
volumes:
– name: task-pv-storage
persistentVolumeClaim:
claimName: task-pv-claim
containers:
– name: task-pv-container
image: nginx
ports:
– containerPort: 60
name: “http”
volumeMounts:
– mountPath: “/usr/share/nginx/html”
name: task-pv-storage
kubectl apply -f nginx-pvc-pod.yaml
// Verify
kubectl describe po “POD-Name” | grep -i volumes -A4
Volumes:
task-pv-storage:
Type: PersistentVolumeClaim (a reference to a
PersistentVolumeClaim in the same namespace)
ClaimName: task-pv-claim
ReadOnly: false

vim nginx-pvc-pod.yaml
apiVersion: v1
kind: Pod
metadata:
name: task-pv-pod
spec:
volumes:
– name: task-pv-storage
persistentVolumeClaim:
claimName: task-pv-claim
containers:
– name: task-pv-container
image: nginx
ports:
– containerPort: 80
name: “http”
volumeMounts:
– mountPath: “/usr/share/nginx/html”
name: task-pv-storage
kubectl apply -f nginx-pvc-pod.yaml
// Verify
kubectl describe po “POD-Name” | grep -i volumes -A5
Volumes:
task-pv-storage:
Type: PersistentVolumeClaim (a reference to a
PersistentVolumeClaim in the same namespace)
ClaimName: task-pv-claim
ReadOnly: false

新問題 14
Score: 7%

Task
Create a new NetworkPolicy named allow-port-from-namespace in the existing namespace echo. Ensure that the new NetworkPolicy allows Pods in namespace my-app to connect to port 9000 of Pods in namespace echo.
Further ensure that the new NetworkPolicy:
* does not allow access to Pods, which don’t listen on port 9000
* does not allow access from Pods, which are not in namespace my-app

新問題 15
Create a pod named kucc8 with a single app container for each of the
following images running inside (there may be between 1 and 4 images specified):
nginx + redis + memcached.

新問題 16
Get list of all the pods showing name and namespace with a jsonpath expression.

新問題 17
Create a file called “config.txt” with two values key1=value1
and key2=value2. Then create a configmap named “keyvalcfgmap” andread data from the file “config.txt” and verify that configmap is created correctly

cat >> config.txt << EOF
key1=value1
key2=value2
EOF
kubectl create cm keyvalcfgmap –from-file=config.txt
//Verify
kubectl get cm keyvalcfgmap -o yaml

cat >> config.txt << EOF
key1=value1
key2=value2
EOF
cat config.txt
// Create configmap from “config.txt” file
kubectl create cm keyvalcfgmap –from-file=config.txt
//Verify
kubectl get cm keyvalcfgmap -o yaml

新問題 18
Deploy a pod with image=redis on a node with label disktype=ssd

// Get list of nodes
kubectl get nodes
//Get node with the label disktype=ssd
kubectl get no -l disktype=ssd
// Create a sample yaml file
kubectl run node-redis –generator=run-pod/v1 –image=redis –dry
run -o yaml > test-redis.yaml
// Edit test-redis.yaml file and add nodeSelector
vim test-redis.yaml
apiVersion: v1
kind: Pod
metadata:
name: redis
spec:
nodeSelector:
disktype: ssd
containers:
– name: node-redis
image: redis
imagePullPolicy: IfNotPresent
kubectl apply -f test-redis.yaml
/ // Verify
K kubectl get po -o wide

// Get list of nodes
kubectl get nodes
//Get node with the label disktype=ssd
kubectl get no -l disktype=ssd
// Create a sample yaml file
kubectl run node-redis –generator=run-pod/v1 –image=redis –dry
run -o yaml > test-redis.yaml
// Edit test-redis.yaml file and add nodeSelector
vim test-redis.yaml
apiVersion: v1
– name: node-redis
image: redis
imagePullPolicy: IfNotPresent
kubectl apply -f test-redis.yaml
/ // Verify
K kubectl get po -o wide

新問題 19
A Kubernetes worker node, named wk8s-node-0 is in state NotReady. Investigate why this is the case, and perform any appropriate steps to bring the node to a state, ensuring that any changes are made permanent.
You can ssh to the failed node using:
[student@node-1] $ | ssh Wk8s-node-0
You can assume elevated privileges on the node with the following command:
[student@w8ks-node-0] $ | sudo -i

新問題 20
Create a deployment named “myapp” that having 2 replicas with
nginx image and expose deployment as service named “myservice”

// Create a YAML Template
kubectl create deploy myapp –image=nginx –dry-run -o yaml >
myapp.yaml
//Update replicas=2 in myapp.yaml file
apiVersion: apps/v1
kind: Deployment
metadata:
labels:
app: myapp
name: myapp
spec:
replicas: 2
selector:
matchLabels:
app: myapp
template:
metadata:
labels:
app: myapp
spec:
containers:
– image: nginx
name: nginx
// Create deployment
kubectl create -f myapp.yaml
// Creating YAML template for service
kubectl expose deployment myapp –type=ClusterIP –port=80 —
target-port=80 –name=myservice –dry-run -o yaml >
myservice.yaml
YAML File:
apiVersion: v1
kind: Service
metadata:
labels:
app: myapp
name: myservice
spec:
ports:
– port: 80
protocol: TCP
targetPort: 80
selector:
app: myapp
type: ClusterIP
kubectl get svc
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S)
AGE
kubernetes ClusterIP 10.2.0.1 <none> 443/TCP
158d
myservice ClusterIP 10.2.96.175 <none> 80/TCP
40s

// Create a YAML Template
kubectl create deploy myapp –image=nginx –dry-run -o yaml >
myapp.yaml
//Update replicas=2 in myapp.yaml file
apiVersion: apps/v1
kind: Deployment
metadata:
labels:
app: myapp
name: myapp
spec:
replicas: 2
selector:
matchLabels:
app: myapp
template:
metadata:
labels:
app: myapp
spec:
containers:
– image: nginx
name: nginx
// Create deployment
kubectl create -f myapp.yaml
// Creating YAML template for service
kubectl expose deployment myapp –type=ClusterIP –port=60 —
target-port=60 –name=myservice –dry-run -o yaml >
myservice.yaml
YAML File:
apiVersion: v1
kind: Service
metadata:
labels:
app: myapp
name: myservice
spec:
ports:
– port: 60
protocol: TCP
targetPort: 80
selector:
app: myapp
type: ClusterIP
kubectl get svc
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S)
AGE
kubernetes ClusterIP 10.2.0.1 <none> 443/TCP
158d
myservice ClusterIP 10.2.96.175 <none> 80/TCP
40s

新問題 21
create a pod in a specific node (node1) by placing the pod definition file in a particular folder “/etc/kubernetes/manifests”.

Generate YAML before we SSH to the specific node, then copy the YAML into the exam notepad to use it after SSH into worker node.
SSH to the node: “ssh node1”
Gain admin privileges to the node: “sudo -i”
Move to the manifest-path “cd /etc/kubernetes/manifests”
kubelet config file — /var/lib/kubelet/config.yaml
Edit the config file “vi /var/lib/kubelet/config.yaml” to add
staticPodPath
staticPodPath: /etc/kubernetes/manifests
Restart the kubelet “systemctl restart kubelet”

Generate YAML before we SSH to the specific node, then copy the YAML into the exam notepad to use it after SSH into worker node.
SSH to the node: “ssh node1”
Gain admin privileges to the node: “sudo -i”
Move to the manifest-path “cd /etc/kubernetes/manifests”
Place the generated YAML into the folder “vi nginx.yaml”
Find the kubelet config file path “ps -aux | grep kubelet” . This
will output information on kubelet process. Locate the kubelet config
file location.
kubelet config file — /var/lib/kubelet/config.yaml
Edit the config file “vi /var/lib/kubelet/config.yaml” to add
staticPodPath
staticPodPath: /etc/kubernetes/manifests
Restart the kubelet “systemctl restart kubelet”

新問題 22
Modify “hello-job” and make it run 10 times one after one and 5 times parallelism: 5

kubectl create job hello-job –image=busybox –dry-run -o yaml
— echo “Hello I am from job” > hello-job.yaml
// edit the yaml file to add completions: 16 and
kubectl create -f hello-job.yaml
YAML File:
apiVersion: batch/v1
kind: Job
metadata:
name: hello-job
spec:
completions: 16
parallelism: 5
template:
metadata:
spec:
containers:
– command:
– echo
– Hello I am from job
image: busybox
name: hello-job
restartPolicy: Never

kubectl create job hello-job –image=busybox –dry-run -o yaml
— echo “Hello I am from job” > hello-job.yaml
// edit the yaml file to add completions: 10 and
kubectl create -f hello-job.yaml
YAML File:
apiVersion: batch/v1
kind: Job
metadata:
name: hello-job
spec:
completions: 10
parallelism: 5
template:
metadata:
spec:
containers:
– command:
– echo
– Hello I am from job
image: busybox
name: hello-job
restartPolicy: Never

新問題 23
Scale the deploymentwebserverto6pods.

新問題 24
How can an administrator configure the NGFW to automatically quarantine a device using Global Protect?

by adding the device’s Host ID to a quarantine list and configure GlobalProtect to prevent users from connecting to the GlobalProtect gateway from a quarantined device.

There is no native auto-quarantine feature so a custom script would need to be leveraged.

by using security policies, log forwarding profiles, and log settings.

by exporting the list of quarantined devices to a pdf or csv file by selecting PDF/CSV at the bottom of the Device Quarantine page and leveraging the appropriate XSOAR playbook.

新問題 25
Score:7%

Context
An existing Pod needs to be integrated into the Kubernetes built-in logging architecture (e. g. kubectl logs). Adding a streaming sidecar container is a good and common way to accomplish this requirement.
Task
Add a sidecar container named sidecar, using the busybox Image, to the existing Pod big-corp-app. The new sidecar container has to run the following command:
/bin/sh -c tail -n+1 -f /va r/log/big-corp-app.log
Use a Volume, mounted at /var/log, to make the log file big-corp-app.log available to the sidecar container.

新問題 26
Update the deployment with the image version 1.16.1 and verify the image and check the rollout history

新問題 27
From the pod label name=cpu-utilizer, find pods running high CPU workloads and write the name of the pod consuming most CPU to the file /opt/KUTR00102/KUTR00102.txt (which already exists).

新問題 28
Create a pod as follows:
Name: mongo
Using Image: mongo
In a new Kubernetes namespace named: my-website

新問題 29
Create a file:
/opt/KUCC00302/kucc00302.txt that lists all pods that implement service baz in namespace development.
The format of the file should be one pod name per line.

新問題 30
List all persistent volumes sorted bycapacity, saving the fullkubectloutput to
/opt/KUCC00102/volume_list. Usekubectl ‘s own functionality forsorting the output, and do not manipulate it any further.

CKA試験問題集を使って一日でKubernetes Administrator試験合格目指す（最新の68解答) [Q10-Q30]

コメントを残すコメントをキャンセル

関連認証

CKA 練習テスト

最近の投稿

アーカイブ

カテゴリー

CKA試験問題集を使って一日でKubernetes Administrator試験合格目指す（最新の68解答) [Q10-Q30]

コメントを残す コメントをキャンセル

関連認証

CKA 練習テスト

最近の投稿

アーカイブ

カテゴリー

コメントを残すコメントをキャンセル