--- title: "Kubernetes Advanced: Production Operations & Scaling" description: "Master Kubernetes at scale: stateful applications, networking, storage, security policies, autoscaling, and production troubleshooting." author: "Mohammad Abu Mattar" canonical: https://mkabumattar.com/quizzes/post/kubernetes-advanced-quiz --- # Kubernetes Advanced: Production Operations & Scaling Welcome to the Kubernetes Advanced Quiz! This quiz is designed to test your knowledge of Kubernetes concepts related to production operations and scaling. Each question will challenge your understanding of key Kubernetes features and best practices for running applications at scale. Good luck! ## Questions ### 1. What is a StatefulSet? - A controller for applications requiring stable network IDs and persistent storage - A workload resource for stateless applications that scale horizontally across nodes - A security policy that enforces immutable root filesystems for sensitive containers - A node-level agent that ensures specific pods run on every single cluster node **Hint:** Think about ordered deployment. ### 2. What is a PersistentVolume (PV)? - A cluster-level storage resource provisioned by an administrator or provisioner - A namespace-scoped request for storage made by a developer or application - A temporary storage area that is deleted when a pod is removed from a node - A configuration object that stores binary data for encrypted secrets **Hint:** Think about storage abstraction. ### 3. What is a PersistentVolumeClaim (PVC)? - A request for storage by a user that consumes specific PersistentVolume resources - A physical disk attached to a worker node via a cloud provider interface - A global storage class that defines the IOPS and throughput of a backend - A backup snapshot of a running volume taken for disaster recovery purposes **Hint:** Think about storage request. ### 4. What is a StorageClass? - An object that enables dynamic provisioning of volumes based on defined profiles - A manual list of available hardware drives connected to the control plane - A networking layer that prioritizes storage traffic over application traffic - A resource quota that limits the total amount of disk space in a namespace **Hint:** Think about dynamic provisioning. ### 5. What is a Service in Kubernetes? - An abstraction that defines a logical set of pods and a policy to access them - A runtime container environment used to execute application logic - A dedicated hardware appliance used for encrypting inter-pod traffic - A background process that monitors node health and reports to the API server **Hint:** Think about load balancing. ### 6. What is Ingress? - An API object that manages external access to services, typically HTTP/HTTPS - A low-level firewall rule that blocks traffic between internal namespaces - A tool for importing external database records into a Kubernetes cluster - A gateway that only allows traffic to flow out of the cluster to the internet **Hint:** Think about HTTP routing. ### 7. What is a ConfigMap? - An API object used to store non-confidential data in key-value pairs - A secure vault for storing encrypted certificates and SSH keys - A visual map of the cluster architecture shown in the dashboard - A script that automatically configures the Linux kernel on worker nodes **Hint:** Think about configuration. ### 8. What is a Secret? - An object for storing sensitive information like passwords or API tokens - A fully encrypted database that replaces ConfigMaps for all application data - A hidden namespace that is invisible to unauthorized cluster users - An authentication token used specifically for accessing the cloud provider GUI **Hint:** Think about sensitive data. ### 9. What is RBAC (Role-Based Access Control)? - A method for regulating access to the Kubernetes API based on individual roles - A system for automatically assigning CPU resources to high-priority users - A network filter that blocks requests based on the geographic location of the user - A hardware-based authentication system using physical security keys **Hint:** Think about permission control. ### 10. What is a NetworkPolicy? - A specification of how groups of pods are allowed to communicate with each other - A global setting that enables internet access for all pods in a cluster - A configuration for the physical routers connecting the cluster to the rack - A protocol for automatically assigning IP addresses to new worker nodes **Hint:** Think about traffic rules. ### 11. What is a Pod Disruption Budget (PDB)? - A limit on the number of pods that can be down simultaneously during voluntary disruptions - A financial limit on how much a team can spend on cloud resources per month - A technical constraint that prevents pods from running longer than 24 hours - A storage limit that prevents pods from writing too much data to a shared volume **Hint:** Think about availability during maintenance. ### 12. What is Horizontal Pod Autoscaler (HPA)? - A system that automatically scales the number of pod replicas based on metrics - A tool that increases the CPU and RAM of a single pod as load increases - A hardware load balancer that distributes traffic across multiple cloud regions - A script that moves pods from older nodes to newer nodes during an upgrade **Hint:** Think about auto-scaling. ### 13. What is Vertical Pod Autoscaler (VPA)? - A system that automatically sets resource requests and limits based on actual usage - A controller that adds more worker nodes to the cluster when pods are pending - A feature that increases the network bandwidth of pods during peak hours - A manual tool used by developers to restart pods that are running out of memory **Hint:** Think about resource sizing. ### 14. What is a DaemonSet in Kubernetes? - A controller ensuring that all (or some) nodes run a copy of a specific pod - A scheduled task that runs once per day to clean up system logs - A set of high-priority pods that always run on the control plane nodes - A collection of nodes that are dedicated to running third-party databases **Hint:** Runs on which nodes? ### 15. What are Jobs and CronJobs in Kubernetes? - Resources for running tasks to completion, either once or on a recurring schedule - Objects that monitor application logs and send alerts to a central dashboard - Internal controllers that manage the lifecycle of long-running web servers - System processes that clean up unused Docker images from node storage **Hint:** Think about batch work patterns. ### 16. What is ResourceQuota in Kubernetes? - A constraint that limits aggregate resource consumption per namespace - A pricing model where users pay for the exact amount of CPU they consume - A tool for measuring the energy efficiency of different cluster nodes - A limit on the number of concurrent users that can access a specific service **Hint:** Namespaces and limits? ### 17. What is LimitRange in Kubernetes? - A policy to constrain resource allocations (limits/requests) for pods in a namespace - A networking rule that defines the range of IP addresses for a service - An extension that allows pods to access a wider range of hardware GPUs - A setting that defines how far a pod can be moved during a cluster rebalance **Hint:** Per-pod or per-container defaults? ### 18. What are Taints and Tolerations? - A mechanism allowing nodes to repel pods unless the pods have a matching toleration - A method for marking corrupted pods so they can be deleted by the controller - A naming convention for identifying nodes that belong to a specific cloud provider - A system for encrypting traffic between pods using mutual TLS **Hint:** Node repulsion and pod attraction? ### 19. What is Node Affinity in Kubernetes? - A set of rules used by the scheduler to define which nodes a pod can be placed on - A feature that automatically joins new worker nodes to an existing cluster - A requirement that all pods in a namespace must use the same CPU architecture - A protocol for syncing time between the control plane and worker nodes **Hint:** Pod placement preferences? ### 20. What is Pod Affinity in Kubernetes? - A rule that allows pods to be scheduled based on the labels of pods already on a node - A setting that ensures all containers in a pod share the same network stack - A mechanism that automatically groups pods into folders in the Kubernetes UI - An optimization that speeds up the transfer of data between containers in a pod **Hint:** Running pods together or apart? ### 21. What are QoS (Quality of Service) classes in Kubernetes? - A classification (Guaranteed, Burstable, BestEffort) that determines eviction priority - A tiered subscription model for different levels of technical support - A measure of the network latency between different availability zones - A ranking system that identifies the most popular services in a cluster **Hint:** Eviction priority during resource pressure? ### 22. What is SecurityContext in Kubernetes? - A set of privilege and access control settings for a pod or container - A visual overview of all firewall rules active in the cluster - An encryption key used to protect data stored in ConfigMaps - A log file that records every failed login attempt to the API server **Hint:** User ID, privileged mode, capabilities? ### 23. What is Pod Security Standards (PSS)? - A set of predefined security profiles (Privileged, Baseline, Restricted) applied to namespaces - A hardware standard for securing the physical ports on a worker node - A manual checklist for developers to follow before deploying to production - A protocol for rotating SSL certificates across all cluster services **Hint:** Cluster-wide pod security enforcement? ### 24. What is Helm in Kubernetes? - A package manager that automates the creation and management of Kubernetes applications - A steering mechanism used to balance traffic between different cloud providers - A lightweight operating system designed to run only Kubernetes worker nodes - A command-line tool used exclusively for viewing pod logs in real-time **Hint:** Package management for Kubernetes? ### 25. What are Custom Resource Definitions (CRDs)? - A resource that allows users to add their own custom objects to the Kubernetes API - A predefined list of standard hardware configurations for cluster nodes - A documentation format used to describe how a specific application works - A security rule that restricts which users can create standard pods **Hint:** Extend Kubernetes API? ### 26. What is a Kubernetes Operator? - A method of packaging and managing applications using the Kubernetes API and custom controllers - A human employee responsible for manual cluster maintenance and upgrades - A dedicated terminal window used for executing administrative commands - A specific type of worker node optimized for high-intensity mathematical operations **Hint:** Domain-specific knowledge in software? ### 27. What is a Service Mesh? - A dedicated infrastructure layer for managing service-to-service communication - A physical mesh network connecting servers in a local data center - A collection of pods that are grouped together for easier monitoring - An application-level library that developers must include in their source code **Hint:** Traffic management and observability sidecar proxy layer? ### 28. What is etcd in Kubernetes? - A distributed key-value store used as the backing store for all cluster data - A caching layer that speeds up the delivery of static website images - A logging service that aggregates stdout and stderr from all containers - A specialized container used to bootstrap new nodes into the cluster **Hint:** Cluster state storage and disaster recovery? ### 29. What is the Kubernetes API versioning strategy? - A system of Stability Levels (Alpha, Beta, Stable) to manage feature maturity - A simple counter that increases every time the cluster is updated - A mandatory upgrade path that requires users to use the latest nightly build - A method for tagging docker images based on their release date **Hint:** API stability levels? ### 30. What is Cluster Autoscaling vs HPA? - Cluster Autoscaling manages node count, while HPA manages pod replica count - Cluster Autoscaling is for on-premises, and HPA is only for cloud environments - Cluster Autoscaling increases CPU limits, while HPA increases RAM limits - They are two different names for the same automated scaling process **Hint:** Node-level scaling versus pod-level scaling?