Part 10 | Most Important CKA Question | Create Network Policy

Part 10 | Most Important CKA Question | Create Network Policy | Certified Kubernetes Administrator

Рет қаралды 5,024

Күн бұрын

CKA Exam Questions Part 10 - • Part 10 | Most Importa...
CKA Exam Questions Part 9 - • Part 9 | Most Importan...
CKA Exam Questions Part 8 - • Part 8 | Most Importan...
CKA Exam Questions Part 7 - • Part 7 | Most Importan...
CKA Exam Questions Part 6 - • Part 6 | Most Importan...
CKA Exam Questions Part 5 - • Part 5 | Most Importan...
CKA Exam Questions Part 4 - • Part 4 | Real CKA Exam...
CKA Exam Questions Part 3 - • Part 3 | Real CKA Exam...
CKA Exam Questions Part 2 - • Part 2 | Real CKA Exam...
CKA Exam Questions Part 1 - • Part 1 | Real CKA Exam...
How to Prepare for CKA video - Tips & Tricks :- • 2024 Master the CKA Ex...
Question 18 - Create a Network Policy named "appychip" in default namespace
There should be two types, ingress and egress.
The ingress should block traffic from an IP range of your choice except some other IP range. Should also have namespace and pod selector.
Ports for ingress policy should be 6379
For Egress, it should allow traffic to an IP range of your choice on 5978 port.
Question 17 - Create a ReplicaSet (Name: appychip, Image: nginx:1.18, Replica: 4)
There is already a Pod running in a cluster.
Make sure that the total count of pods running in the cluster is not more than 4
Question 16 - A pod “appychip” (image=nginx) in default namespace is not running. Find the problem and fix it and make it running.
Question 15 - Create a Nginx pod dns-resolver using image nginx, expose it internally with a aservice called dns-resolver-service.
Check if service name is resolvable from within the cluster.
Use the image busybox:1.28 for dns lookup
Save the result in /root/nginx.svc
Question 14 - Create a new user “ajeet”. Grant him access to the cluster. User “ajeet” should have permission to create, list, get, update and delete pods. The private key exists at location:
/root/ajeet/.key and csr at /root/ajeet.csr
Question 13 - Take a backup of the ETCD database and save it to “/opt/etcd-backup.db” . Also restore the ETCD database from the backup
Question 12 - Upgrade the Cluster (Master and worker Node) from 1.18.0 to 1.19.0. Make sure to first drain both Node and make it available after upgrade.
Question 11 - Worker Node “node01” not responding, Debug the issue and fix it.
Question 10 - Create a Persistent Volume with the given specification.
Volume Name: pv-demo
Storage:100Mi
Access modes: ReadWriteMany
Host Path: /pv/host-data
Question 9 - Use JSON PATH query to retrieve the oslmages of all the nodes and store it in a file “all-nodes-os-info.txt” at root location.
Note: The osImage are under the nodeInfo section under status of each node.
Question 8 - Get the node node01 in JSON format and store it in a file at ./node-info.json
Question 7 - Create a pod called test-pod in "custom" namespace belonging to the test environment (env=test) and backend tier (tier=backend). image: nginx:1.17
Question 6 - Create a pod called pod-multi with two containers, as given below:
Container 1 - name: container1, image: nginx
Container2 - name: container2, image: busybox, command: sleep 4800
Question 5 - Create a static pod on node01 called static-pod with image nginx and you have to make sure that it is recreated/restarted automatically in case of any failure happens
Question 4 - Deploy a web-nginx pod using the nginx:1.17 image with the labels set to tier=web-app.
Question 3 - Create a new deployment called my-deployment. Scale the deployment to 3 replicas.
Make sure desired number of pod always running.
Question 2 - Create a new deployment called myproject, with image nginx:1.16 and 1 replica. Next upgrade the deployment to version 1.17 using rolling update. Make sure that the version upgrade is recorded in the resource annotation.
Question 1 - Create a new pod called web-pod with image busybox Allow the pod to be able to set system_time. The container should sleep for 3200 seconds
This is a video of all the exam questions I have ever asked. If you are preparing to take the CKA, or if you are taking the CKA, then this video is for you. I hope it helps!
This is the first of three videos where I discuss a module of questions from the Certified Knowledge Architect (CKA) exam. These questions provide good examples of what to expect on the exam and how to answer them. There's a ton I could say about the CKA, but in this video I keep it high level and superficially examine the exam to determine what topics will be covered in detail later on.
#CKA #Kubernetes #CertifiedKubernetesAdministrator #CKAExam #CKAPracticeQuestions #K8s #KubernetesCertification
#CKAExamTips #KubernetesTraining #CKAExamPrep #KubernetesAdmin #CKAOnlineTraining #KubernetesCertified #CKACertification #CKAExamGuide
#KubernetesAdministrator #CKACertifiedProfessional #CKAExamFormat #KubernetesExpert
#CKAPrepGuide #KubernetesAdminCertification #CKAOnlineCourse
#CKAOnlineExam #KubernetesTrainingOnline #CKAPracticeExam #CKACourse

Пікірлер: 40

@nateshsharan1844 7 ай бұрын

@5:17 I think you are wrong about the IpBlock part. IpBlock isnt blocking IP address. Its block of IP address which are allowed.

@ramisarhan8618 2 ай бұрын

i think you are right

@hims0912 Жыл бұрын

Sirji I passed my CKA today in first attempt, my session was really really laggy towards the end of exam which is why I struggled last 40 mins with trying to attempt couple of questions. Your series helped a lot, thank you so much.I got etcd backup and restore, clusterrole binding of service account, pvc sizing, kubeadm upgrade of master node only, ingress resource creation, network policy. For troubleshooting it was easier one to just start the kubelet.

@iajeetkhan Жыл бұрын

Wow! This is really a good news. Thanks for sharing your experience with me and the community. Please give this channel a shoutout over social media (specially on LinkedIn). Keep Learning & Keep Sharing :)

@user-hy2pd4zf5b Жыл бұрын

i passed my CKA exam in my first attempt. Thank you sir for your excellent teaching and guidance helped me immensely in clearing the CKA exam.Moreover, these questions helped me to pass my exam:ETCD backup and restore, PV and PVC, cluster role and clusterrolebinding, deployment and networkpolicy.

@iajeetkhan Жыл бұрын

Congratulations! 🥳 Really glad that the videos helped. Please give a shoutout and share these videos with your peers and over linkedIn. Keep Learning & Keep Sharing :)

@welsh1lad 5 ай бұрын

Hay dood , enjoying your vids , hipoing to to do my CKA by end of april . so will continue watching your vids.

@iajeetkhan 5 ай бұрын

I am glad my videos are helpful. I wish you all the best for the exam. I recommend to complete all the videos at least twice with practice. Please do share your experience after the exam. Keep Learning & Keep Sharing 💪🏻💪🏻

@beyazmaden6242 9 ай бұрын

Hi Ajeet Khan. Your question solving technic is very useful. I get CKA certificate and I solved your questions two times🙂. Thank you for your videos.

@iajeetkhan 9 ай бұрын

👏 Congratulations! When I hear the success stories, my hard-work gets paid off. Thanks for sharing this. Can you please share your experience and questions over LinkedIn or Twitter DM with me? Also, please share the playlist over linkedIn by mentioning that you have cleared the exam. This will be a support for my channel 🙏🏻🙏🏻

@abhinav96532 8 ай бұрын

@beyazmaden6242 Can you tell what kind of questions u got? It will help us for exam

@gauravmitra175 Жыл бұрын

Hi Ajeet Glad to share I passed CKA.Yours video solutions were very informative and helpful.Thank You❤❤

@iajeetkhan Жыл бұрын

Glad to hear this. Please give a shoutout over social media to my channel :) Keep Learning & Keep Sharing :)

@SunitaSonawane2007 Жыл бұрын

Excellent video 👍

@iajeetkhan Жыл бұрын

Thank you very much!

@Ngjoy71 9 ай бұрын

In the ingress from I see you have used arrays of three elements ipblock, namespaceselector and podselector Will that be in OR condition or AND condition? In question, it is asked it should allow certain ip block certain ip, should also use namespaceselector and podselector. So there is AND condition , should there be just list and not array?

@prajwaldeshpande7984 7 ай бұрын

what if we completed half questions and half of it is wrong will marks given ?

@iajeetkhan 7 ай бұрын

Yes, you will get partial marks for it

@mbaapohelviszonepoh1284 Жыл бұрын

ipBlock: This selects particular IP CIDR ranges to allow as ingress sources or egress destinations. These should be cluster-external IPs, since Pod IPs are ephemeral and unpredictable.

@iajeetkhan Жыл бұрын

Yes, you are right. But this is just an example. Based on given scenario in the exam, you can use either of them.

@danialsaeed8131 10 ай бұрын

Sir will more videos come?

@karankumarkaran1268 Жыл бұрын

@ajeet, I have scheduled the exam in this month 26... Are these types of questions are enough to clear the exam?

@iajeetkhan Жыл бұрын

Hi, I wish you all the best for the exam. You need to cover and understand all topics in kubernetes first. Once you are dome with that, you can practice these questions amd make sure, you are able to solve these questions on your own. Please follow the tips video on how to ateempt the exam. This way, i am pretty sure, you will crack the exam. So far, 4 people have reported in comments that these videos were helpful. I wish you all the best. Please let us know your experience here in comment section once you clear the exam. This will help others 🙏

@sureshk1133 Жыл бұрын

Hi wanted to check if you have received kubeadm cluster set up from scratch in the exam ? wanted to know more about that question , thanks a lot ajeet

@iajeetkhan Жыл бұрын

apologies for the delay in reply. Usually questions are not being asked to setup the cluster. However, you will be asked to upgrade the cluster which is setup through kubeadm. So prepare yourself to upgrade a cluster. I have created a video around that question. Please go through the whole playlist.

@sureshk1133 Жыл бұрын

@@iajeetkhan thanks for the redone . Yes I have seen it and also other parts In details 😊.

@arungobinath Жыл бұрын

coming week plan to write exam. Thanks for your videos

@iajeetkhan Жыл бұрын

I wish you all the very best 💪🏻 Do let me know your experience and result 👍

@arungobinath Жыл бұрын

@@iajeetkhan sure

@iajeetkhan 10 ай бұрын

Hi, i hope your exam went well. Can you please share your experience?

@TheFootballNet-wr8sv 9 ай бұрын

HI bro I am appearing for the exam on coming Monday but my drawbacks are network policy and trouble shooting can you share something more about it I have watch all of your videos It is Fabulous @@iajeetkhan

@iajeetkhan 9 ай бұрын

@@TheFootballNet-wr8sv I wish you all the best. You can skip the network policy question initially and attempt it when you are done with remaining question. Please make sure you know creating pv pvc, pods. Also make sure you know how to upgrade cluster or given node. Carefully go through cheatsheet and remember how to find resources in documentation.

@atishjagtap1955 11 ай бұрын

Thank you Ajeet ! 😊🙌🏻 I passed the CKA exam in my first attempt with 93/100 score

@iajeetkhan 10 ай бұрын

Awesome & Congratulations 👏 I am glad that my videos are helpful. Please help me to spread the channel by sharing my content on linkedIn. Thanks 🙏 😊

@cos-ibeuchechukwu9398 Жыл бұрын

my exam is comming up soon, will let you know how it goes

@iajeetkhan Жыл бұрын

I wish you all yhe best. Eagerly waiting for your results. 🤞

@cos-ibeuchechukwu9398 Жыл бұрын

@@iajeetkhan update: I passed the CKA. Score was 75. I skipped the network policy one cos it was sooo foreign to me. Make videos on ingress yaml config , network policy (allowing connection within namespaces) or side-car configuration. Thanks alot for the videos it helped

@iajeetkhan 10 ай бұрын

Awesome and congratulations 🙌 Thanks for the feedback. I will surely make more videos on topic you suggested. Keep learning and keeping sharing 💪🏻

@cos-ibeuchechukwu9398 10 ай бұрын

@@iajeetkhan I got a job too about a week ago. Unfortunately we use nomad and not Kubernetes 😂😅