Free KCNA Sample Questions — Kubernetes and Cloud Native Associate

Kubernetes and Cloud Native Associate (KCNA) is a associate-level Linux Foundation certification exam. The blueprint splits the exam across 5 domains, starting with Kubernetes Fundamentals, Container Orchestration, Cloud Native Architecture. On exam day you have 90 minutes, in formats such as multiple-choice. The 20 questions below are free samples written to match that style: answer each one first, then reveal the correct answer and note which topics you miss. The KCNA is rated medium in difficulty, and most candidates prepare with at least 3 months of hands-on experience. Because every answer is revealed in place, you can work through the whole set without leaving this page. Work through all 20 samples before deciding whether to buy the full 179+ question PDF.

  • 20 free questions
  • 90 min
  • $250 official fee
  • Every free question shows the correct answer
  • Questions follow the official 5-domain blueprint
  • No account or email required
  • 179+ questions in the full PDF

Looking for more? Click here to get the full PDF with 179+ practice questions for $10 for offline study and deeper preparation.

Question 1

Why do administrators need a container orchestration tool?

  • A. To manage the lifecycle of an elevated number of containers
  • B. To assess the security risks of the container images used in production
  • C. To learn how to transform monolithic applications into microservices
  • D. Container orchestration tools such as Kubernetes are the future
Show Answer
Correct Answer:
B. To assess the security risks of the container images used in production
Question 2

What component enables end users, different parts of the Kubernetes cluster, and external components to communicate with one another?

  • A. kubectl
  • B. AWS Management Console
  • C. Kubernetes API
  • D. Google Cloud SDK
Show Answer
Correct Answer:
C. Kubernetes API
Question 3

What is the minimum of etcd members that are required for a highly available Kubernetes cluster?

  • A. Two etcd members
  • B. Five etcd members
  • C. Six etcd members
  • D. Three etcd members
Show Answer
Correct Answer:
C. Six etcd members
Question 4

Which of the following sentences is true about namespaces in Kubernetes?

  • A. You can create a namespace within another namespace in Kubernetes
  • B. You can create two resources of the same kind and name in a namespace
  • C. The default namespace exists when a new cluster is created
  • D. All the objects in the cluster are namespaced by default
Show Answer
Correct Answer:
C. The default namespace exists when a new cluster is created
Question 5

What does CNCF stand for?

  • A. Cloud Native Community Foundation
  • B. Cloud Native Computing Foundation
  • C. Cloud Neutral Computing Foundation
  • D. Cloud Neutral Community Foundation
Show Answer
Correct Answer:
B. Cloud Native Computing Foundation
Question 6

Which of the following statements is correct concerning Open Policy Agent (OPA)?

  • A. The policies must be written in Python language
  • B. Kubernetes can use it to validate requests and apply policies
  • C. Policies can only be tested when published
  • D. It cannot be used outside Kubernetes
Show Answer
Correct Answer:
B. Kubernetes can use it to validate requests and apply policies
Question 7

What is the order of 4C’s in Cloud Native Security, starting with the layer that a user has the most control over?

  • A. Cloud -> Container -> Cluster -> Code
  • B. Container -> Cluster -> Code -> Cloud
  • C. Cluster -> Container -> Code -> Cloud
  • D. Code -> Container -> Cluster -> Cloud
Show Answer
Correct Answer:
D. Code -> Container -> Cluster -> Cloud
Question 8

What methods can you use to scale a deployment?

  • A. With kubectl edit deployment exclusively
  • B. With kubectl scale-up deployment exclusively
  • C. With kubectl scale deployment and kubectl edit deployment
  • D. With kubectl scale deployment exclusively
Show Answer
Correct Answer:
C. With kubectl scale deployment and kubectl edit deployment
Question 9

What is the primary mechanism to identify grouped objects in a Kubernetes cluster?

  • A. Custom Resources
  • B. Labels
  • C. Label Selector
  • D. Pod
Show Answer
Correct Answer:
B. Labels
Question 10

What is the goal of load balancing?

  • A. Automatically measure request performance across instances of an application
  • B. Automatically distribute requests across different versions of an application
  • C. Automatically distribute instances of an application across the cluster
  • D. Automatically distribute requests across instances of an application
Show Answer
Correct Answer:
D. Automatically distribute requests across instances of an application
Question 11

Which of the following is a valid PromQL query?

  • A. SELECT * from http_requests_total WHERE job=apiserver
  • B. http_requests_total WHERE (job="apiserver")
  • C. SELECT * from http_requests_total
  • D. http_requests_total(job="apiserver")
Show Answer
Correct Answer:
D. http_requests_total(job="apiserver")
Question 12

What is the correct hierarchy of Kubernetes components?

  • A. Containers → Pods → Cluster → Nodes
  • B. Nodes → Cluster → Containers → Pods
  • C. Cluster → Nodes → Pods → Containers
  • D. Pods → Cluster → Containers → Nodes
Show Answer
Correct Answer:
D. Pods → Cluster → Containers → Nodes
Question 13

Which one of the following is an open source runtime security tool?

  • A. lxd
  • B. containerd
  • C. falco
  • D. gvisor
Show Answer
Correct Answer:
C. falco
Question 14

Which persona is normally responsible for defining, testing, and running an incident management process?

  • A. Site Reliability Engineers
  • B. Project Managers
  • C. Application Developers
  • D. Quality Engineers
Show Answer
Correct Answer:
A. Site Reliability Engineers
Question 15

In Kubernetes, if the API version of feature is v2beta3, it means that:

  • A. The version will remain available for all future releases within a Kubernetes major version
  • B. The API may change in incompatible ways in a later software release without notice
  • C. The software is well tested. Enabling a feature is considered safe
  • D. The software may contain bugs. Enabling a feature may expose bugs
Show Answer
Correct Answer:
C. The software is well tested. Enabling a feature is considered safe
Question 16

What are the most important resources to guarantee the performance of an etcd cluster?

  • A. CPU and disk capacity
  • B. Network throughput and disk I/O
  • C. CPU and RAM memory
  • D. Network throughput and CPU
Show Answer
Correct Answer:
B. Network throughput and disk I/O
Question 17

How does dynamic storage provisioning work?

  • A. user requests dynamically provisioned storage by including an existing storage class in their PersistentVolumeClaim
  • B. An administrator creates a storage class and includes it in their pod YAML definition file without creating a PersistentVolumeClaim
  • C. pod requests dynamically provisioned storage by including a storage class and the pod name in their PersistentVolumeClaim
  • D. An administrator creates a PersistentVolume and includes the name of the PersistentVolume in their pod YAML definition file
Show Answer
Correct Answer:
A. user requests dynamically provisioned storage by including an existing storage class in their PersistentVolumeClaim
Question 18

Which type of Service requires manual creation of Endpoints?

  • A. LoadBalancer
  • B. Services without selectors
  • C. NodePort
  • D. ClusterIP with selectors
Show Answer
Correct Answer:
B. Services without selectors
Question 19

The Kubernetes project work is carried primarily by SIGs. What does SIG stand for?

  • A. Special Interest Group
  • B. Software Installation Guide
  • C. Support and Information Group
  • D. Strategy Implementation Group
Show Answer
Correct Answer:
A. Special Interest Group
Question 20

Kubernetes ___ allows you to automatically manage the number of nodes in your cluster to meet demand.

  • A. Node Autoscaler
  • B. Cluster Autoscaler
  • C. Horizontal Pod Autoscaler
  • D. Vertical Pod Autoscaler
Show Answer
Correct Answer:
B. Cluster Autoscaler

KCNA sample questions FAQ

Are these KCNA sample questions from the real exam?

No. They are original practice questions written to match the format and topic mix of the Kubernetes and Cloud Native Associate exam. Treat them as representative practice, not leaked exam content.

How many free KCNA sample questions do I get?

This page includes 20 questions, each with its correct answer you can reveal in place. The full study PDF expands that to 179+ questions.

Do the sample questions include the correct answers?

Yes. Open the answer panel under each question to see which option is correct. Answer first, then reveal, so the set works as a self-check rather than a reading exercise.

Is 20 sample questions enough to pass the KCNA?

Not on its own. Use the samples to find weak topics, revise them against the official domains, then work through the full 179+ question set under timed conditions before booking the exam.

Aced these? Get the Full Exam

Download the complete KCNA study bundle with 179+ questions in a single printable PDF.