Kubernetes CKA Practice Exam Pack — 2026 Edition

Product Metadata

• Price: $14.99
• SKU: CCM-EXAM-CKA-2026
• Tags: practice-exam, certification, kubernetes, cka, cncf
• Product Type: Digital Download

Product Description

85 hands-on tasks mapped to all 5 domains of the Certified Kubernetes Administrator (CKA) exam. Unlike multiple-choice dumps, these are performance-based tasks that match the real exam's hands-on format.

What's included:

• 85 scenario-based tasks with step-by-step solutions
• kubectl commands for every task (copy-paste ready)
• YAML manifests for Pods, Deployments, Services, NetworkPolicies, PVCs
• Troubleshooting walkthroughs for common cluster failures
• Time estimates per task to practice exam pacing

Domain coverage:

• Cluster Architecture (25%): ~21 tasks — etcd backup/restore, node management, kubeadm upgrades
• Workloads & Scheduling (15%): ~13 tasks — Deployments, DaemonSets, resource limits, scheduling constraints
• Services & Networking (20%): ~17 tasks — Services, Ingress, NetworkPolicy, DNS
• Storage (10%): ~9 tasks — PV/PVC, StorageClass, volume mounts
• Troubleshooting (30%): ~25 tasks — pod failures, node issues, networking problems, log analysis

Exam format: 15-20 performance-based tasks, 120 minutes, passing score 66%. Open book (kubernetes.io). Cost: $395 (includes retake).

Study companion: Pair with Citadel's free Kubernetes courses.

Sample Tasks

Task 1 (Cluster Architecture): Back up the etcd cluster to `/opt/etcd-backup.db`. The etcd server is running on the control plane node with certificates at `/etc/kubernetes/pki/etcd/`.

Solution:

ETCDCTL_API=3 etcdctl snapshot save /opt/etcd-backup.db \
  --endpoints=https://127.0.0.1:2379 \
  --cacert=/etc/kubernetes/pki/etcd/ca.crt \
  --cert=/etc/kubernetes/pki/etcd/server.crt \
  --key=/etc/kubernetes/pki/etcd/server.key

Task 2 (Workloads): Create a Deployment named `web-app` in namespace `production` with 3 replicas running `nginx:1.25`. Set resource requests to 100m CPU and 128Mi memory.

Solution:

kubectl create deployment web-app -n production --image=nginx:1.25 --replicas=3 --dry-run=client -o yaml > web-app.yaml
# Edit to add resources, then apply
kubectl apply -f web-app.yaml

Task 3 (Networking): Create a NetworkPolicy in namespace `secure` that allows ingress traffic to pods labeled `app=api` only from pods labeled `role=frontend` on port 8080.

Solution:

apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: api-allow-frontend
  namespace: secure
spec:
  podSelector:
    matchLabels:
      app: api
  ingress:
  - from:
    - podSelector:
        matchLabels:
          role: frontend
    ports:
    - port: 8080

Task 4 (Storage): Create a PersistentVolumeClaim named `data-pvc` requesting 5Gi of storage with `ReadWriteOnce` access mode using the `standard` StorageClass. Mount it to a pod at `/data`.

Solution:

apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: data-pvc
spec:
  accessModes: [ReadWriteOnce]
  resources:
    requests:
      storage: 5Gi
  storageClassName: standard

Task 5 (Troubleshooting): A pod named `broken-app` in namespace `debug` is in CrashLoopBackOff. Diagnose the issue and fix it.

Approach:

kubectl describe pod broken-app -n debug    # Check events
kubectl logs broken-app -n debug            # Check app logs
kubectl logs broken-app -n debug -p         # Previous container logs
# Common fixes: wrong image tag, missing ConfigMap/Secret, command typo, port mismatch