그 외, Itcertkr KCNA 시험 문제집 일부가 지금은 무료입니다: https://drive.google.com/open?id=1Kjg7eI23wyTVGUXxJg8j7Ub2pRYVYxSG
Itcertkr 의 학습가이드에는Linux Foundation KCNA인증시험의 예상문제, 시험문제와 답입니다. 그리고 중요한 건 시험과 매우 유사한 시험문제와 답도 제공해드립니다. Itcertkr 을 선택하면 Itcertkr 는 여러분을 빠른시일내에 시험관련지식을 터득하게 할 것이고Linux Foundation KCNA인증시험도 고득점으로 패스하게 해드릴 것입니다.
Linux Foundation KCNA 시험은 온라인에서 전 세계 어디에서나 취할 수있는 온라인 시험입니다. 시험은 40 개의 객관식 질문으로 구성되며 90 분 이내에 완료해야합니다. 이 시험은 도전적이지만 공정하게 설계되었으며 Kubernetes 및 Cloud-Native Technologies에 대한 후보자의 지식과 이해를 테스트하기위한 것입니다.
Linux Foundation인증 KCNA시험은 인기있는 IT자격증을 취득하는데 필요한 국제적으로 인정받는 시험과목입니다. Linux Foundation인증 KCNA시험을 패스하려면 Itcertkr의Linux Foundation인증 KCNA덤프로 시험준비공부를 하는게 제일 좋은 방법입니다. Itcertkr덤프는 IT전문가들이 최선을 다해 연구해낸 멋진 작품입니다. Linux Foundation인증 KCNA덤프구매후 업데이트될시 업데이트버전을 무료서비스료 제공해드립니다.
이 자격증 시험은 도전적으로 설계되었으며 후보자는 다루는 주제에 대한 철저한 이해를 가지고 있어야 합니다. 이 시험은 객관식 문제와 실제 시나리오에서 지식을 적용하는 실습 문제로 구성되어 있습니다. 이 시험은 온라인으로 진행되며 후보자는 전 세계 어디에서든 응시할 수 있습니다.
질문 # 316
Scenario: You have a Kubernetes cluster hosted in a public cloud provider. When trying to create a Service of type LoadBalancer, the external-ip is stuck in the "Pending" state. Which Kubernetes component is failing in this scenario?
정답：C
설명：
When you create a Service of type LoadBalancer in a cloud environment, Kubernetes relies on cloud-provider integration to provision an external load balancer and allocate a public IP (or equivalent). The control plane component responsible for this integration is the cloud-controller-manager, so A is correct.
In Kubernetes, a LoadBalancer Service triggers a controller loop that calls the cloud provider APIs to create/update a load balancer that forwards traffic to the cluster (often via NodePorts on worker nodes, or via provider-specific mechanisms). The Service remains with EXTERNAL-IP: Pending until the cloud provider resource is successfully created and the controller updates the Service status with the assigned external address. If that status never updates, it usually indicates the cloud integration path is broken-commonly due to: missing cloud provider configuration, broken credentials/IAM permissions, the cloud-controller-manager not running/healthy, or a misconfigured cloud provider implementation.
The other options are not real Kubernetes components. Kubernetes does not include a "Load Balancer Manager" or "Cloud Architecture Manager" component name in its standard architecture. In many managed Kubernetes offerings, the cloud-controller-manager (or its equivalent) is provided/managed by the provider, but the responsibility remains the same: reconcile Kubernetes Service resources into cloud load balancer resources.
Therefore, in this scenario, the failing component is the Cloud Controller Manager, which is the Kubernetes control plane component that interfaces with the cloud provider to provision external load balancers and update the Service status.
질문 # 317
What is the primary mechanism to identify grouped objects in a Kubernetes cluster?
정답：A
질문 # 318
What Kubernetes component handles network communications inside and outside of a cluster, using operating system packet filtering if available?
정답：B
설명：
kube-proxy is the Kubernetes component responsible for implementing Service networking on nodes, commonly by programming operating system packet filtering / forwarding rules (like iptables or IPVS), which makes A correct.
Kubernetes Services provide stable virtual IPs and ports that route traffic to a dynamic set of Pod endpoints.
kube-proxy watches the API server for Service and EndpointSlice/Endpoints updates and then configures the node's networking so that traffic to a Service is correctly forwarded to one of the backend Pods. In iptables mode, kube-proxy installs NAT and forwarding rules; in IPVS mode, it programs kernel load-balancing tables. In both cases, it leverages OS-level packet handling to efficiently steer traffic. This is the "packet filtering if available" concept referenced in the question.
kube-proxy's work affects both "inside" and "outside" paths in typical setups. Internal cluster clients reach Services via ClusterIP and DNS, and kube-proxy rules forward that traffic to Pods. For external traffic, paths often involve NodePort or LoadBalancer Services or Ingress controllers that ultimately forward into Services
/Pods-again relying on node-level service rules. While some modern CNI/eBPF dataplanes can replace or bypass kube-proxy, the classic Kubernetes architecture still defines kube-proxy as the component implementing Service connectivity.
The other options are not networking dataplane components: kubelet runs Pods and reports status; etcd stores cluster state; kube-controller-manager runs control loops for API objects. None of these handle node-level packet routing for Services. Therefore, the correct verified answer is A: kube-proxy.
질문 # 319
Which of the following sentences is true about namespaces in Kubernetes?
정답：C
설명：
The true statement is C: the default namespace exists when a new cluster is created. Namespaces are a Kubernetes mechanism for partitioning cluster resources into logical groups. When you set up a cluster, Kubernetes creates some initial namespaces (including default, and commonly kube-system, kube-public, and kube-node-lease). The default namespace is where resources go if you don't specify a namespace explicitly.
Option A is false because namespaces are not hierarchical; Kubernetes does not support "namespaces inside namespaces." Option B is false because within a given namespace, resource names must be unique per resource kind. You can't have two Deployments with the same name in the same namespace. You can have a Deployment named web in one namespace and another Deployment named web in a different namespace- namespaces provide that scope boundary. Option D is false because not all objects are namespaced. Many resources are cluster-scoped (for example, Nodes, PersistentVolumes, ClusterRoles, ClusterRoleBindings, and StorageClasses). Namespaces apply only to namespaced resources.
Operationally, namespaces support multi-tenancy and environment separation (dev/test/prod), RBAC scoping, resource quotas, and policy boundaries. For example, you can grant a team access only to their namespace and enforce quotas that prevent them from consuming excessive CPU/memory. Namespaces also make organization and cleanup easier: deleting a namespace removes most namespaced resources inside it (subject to finalizers).
So, the verified correct statement is C: the default namespace exists upon cluster creation.
=========
질문 # 320
Which kubectl command is used to collect logs from a Pod?
정답：C
설명：
kubectl logs <pod-name> retrieves the standard output and standard error logs produced by the container running in the specified Pod.
질문 # 321
......
KCNA최신 인증시험 기출자료: https://www.itcertkr.com/KCNA_exam.html
그 외, Itcertkr KCNA 시험 문제집 일부가 지금은 무료입니다: https://drive.google.com/open?id=1Kjg7eI23wyTVGUXxJg8j7Ub2pRYVYxSG