Updated Mar-2026 Official licence for CKAD Certified by CKAD Dumps PDF [Q109-Q125]

5/5 - (1 vote)

Updated Mar-2026 Official licence for CKAD Certified by CKAD Dumps PDF

Grab latest Amazon CKAD Dumps as PDF Updated on 2026

NO.109 You are designing a container image for a Java application that utilizes a specific version of Maven. Explain how you would include this Maven version Within tne Docketflle to ensure consistent builds across different environments.

NO.110 You have a Kustomization file that uses a resource patch to modify the deployment of an Nginx service. The patch uses the field to set the CPLJ request for the container to 500m. However, you’ve noticed that this patch is no longer working as expected. You’ve been informed that the field has been deprecated and replaced with a new field structure in newer Kubernetes API versions. Explain how to update the Kustomization file to accommodate this change, ensuring compatibility with both older and newer Kubernetes versions.

NO.111 You are tasked with creating a highly available, scalable, and stateful application that handles user profiles and associated dat a. The application must be able to handle high write and read traffic and ensure data consistency. Which Kubernetes resource is best suited tor this scenario and why? Additionally, provide a code snippet illustrating the deployment of this resource with three replicas, each storing user data in a persistent volume.

NO.112 You’re building a containerized application that needs access to a database running outside of the Kubernetes cluster You need to implement a service account With specific permissions to access tne external database using an API key.

NO.113 You are building a microservices application on Kubernetes, where two services, and ‘service-b’ , need to communicate with each other securely. ‘Service-b’ needs to expose a secure endpoint that is only accessible by ‘service-a’. Describe how you would implement this using Kubernetes resources, including the configuration for the ‘service-b’ endpoint.

See the solution below with Step by Step Explanation.
Explanation:
Solution (Step by Step) :
1. Define a Kubernetes Secret:
– Create a Kubernetes secret to store the certificate and key pair for ‘service-W. This secret will be used to secure the communication.
– Example:

2. Configure ‘service-b’ Deployment: – Define a Deployment for ‘service-b’ , specifying a container that uses the secret for TLS. – Ensure that the container has the required dependencies and configuration to use TLS. – Example:

3. Define a Kubernetes Service for ‘service-b’.’ – Create a Service for ‘service-b’ that exposes the secure endpoint on a specific port (e.g., 8443) and uses the LoadBalancer’ type for external access. – Use the ‘targetPort’ field to specify the container port that ‘service-b’ is listening on. – Example:

4. Configure ‘service-a’ Deployment: – Define a Deployment for ‘service-a’, specifying a container that uses the secret for TLS when connecting to service-W. – Example:

5. Update ‘service-a’ Container Configuration: – Within the ‘service-a’ container, ensure the application is configured to use the certificate and key from the mounted volume (‘Ivar/tls/’) for secure communication with ‘service-b’. 6. Verify Secure Communication: – Use ‘kubectl get pods’ to check the status of both ‘service-a’ and ‘service-W pods. – Test the communication between ‘service-a’ and ‘service-b’ by sending requests from the ‘service-a’ pod to the secure endpoint of ‘service-b’. – Verify that the communication is secure and that ‘service-a’ can successfully access the endpoint. Notes: – You may need to adjust the port numbers and image names in the examples to match your specific setup. – Make sure you have the certificate and key in the correct format and base64 encoded before creating the Secret. – You can also use other methods like a Service Account and Role-Based Access Control (RBAC) to restrict access to the secure endpoint, if needed. – This is a simplified example and additional security measures may be required based on your application’s requirements. ,

NO.114 You are running a web application with two replicas. You need to ensure that there is always at least one replica available while updating the application. You also need to have a maximum of two replicas during the update. How would you configure a rolling update strategy for your Deployment?

NO.115 You have a Deployment named ‘my-app-deployment’ that runs 3 replicas of a Spring Boot application. This application needs to access a PostgreSQL database hosted on your Kubernetes cluster. You need to create a Custom Resource Definition (CRD) to define a new resource called ‘Database’ to represent the PostgreSQL database instances within your cluster. This CRD should include fields for specifying the database name, username, password, and the host where the database is deployed. Further, you need to configure the ‘my- app-deployment’ to use the ‘Database’ resource to connect to the PostgreSQL instance dynamically.

NO.116 You have a Kubernetes cluster with a Deployment named ‘wordpress-deployment running 3 replicas of a WordPress container. You want to expose this deployment as a service and ensure that the service only forwards traffic to the pods With the label ‘version: v?. You need to create a service with the following requirements:
– The service name should be swordpress-service’
– The service should be of type ‘Load8alancer’ for external access.
– The service should only target pods with the label ‘version: v?
– The service should expose port 80 on tne service, wmch maps to port 8080 in the WordPress container.

NO.117 You have a stateful set named ‘mysql-statefulset’ that runs a MySQL database. The database data is stored in a PersistentV01umeClaim (PVC) named ‘mysql-pvc’ _ You want to ensure that the PVC is always mounted to the same pod, even after a pod restart or replacement. Additionally, you want to configure the PVC to use a specific storage class tor data persistence.

NO.118

Task:
The pod for the Deployment named nosql in the craytisn namespace fails to start because its container runs out of resources.
Update the nosol Deployment so that the Pod:
1) Request 160M of memory for its Container
2) Limits the memory to half the maximum memory constraint set for the crayfah name space.

NO.119 You have a web application that uses two different services: ‘frontend’ and ‘backend’. You want to restrict access to the ‘backend’ service from all pods except those with the label ‘app: frontend’. How would you configure NetworkPolicy to achieve this?

NO.120 You’re developing a Kubernetes application that requires a custom resource definition (CRD) to manage the configuration of your application. You need to ensure that only authorized users or groups can create or modify instances of this custom resource. How would you configure security contexts for the CRD to achieve this?

NO.121 You have a Deployment named ‘mysql-deployment running a MySQL database container. The ‘mysql-deployment’ has 2 replicas and you want to implement a blue-green deployment strategy for updating the database. The following steps need to be implemented:
– Create a new Deployment called ‘mysql-deployment-new’ with the updated MySQL image.
– Ensure that both deployments (old and new) are running concurrently.
– Route traffic to the ‘mysql-deployment-new’ deployment.
– Remove the old deployment (‘mysql-deployment) once the traffic is switched over.

NO.122 You have a Kubernetes deployment named ‘my-app’ that runs an application with a specific configuration defined in a ConfigMap named ‘my-config’. You need to implement a strategy to automatically update tne deployment wnen tne ConfigMap is changed.

NO.123 You are running a web application in a Kubernetes cluster. You have a deployment named ‘web- app’ with two replicas. You need to implement a Network Policy that allows only traffic from pods with the label app: database’ to access the ‘web-app’ deployment on port 8080. You also need to block all other traffic to the ‘web-app’ deployment.

NO.124 Context

Context
As a Kubernetes application developer you will often find yourself needing to update a running application.
Task
Please complete the following:
* Update the app deployment in the kdpd00202 namespace with a maxSurge of 5% and a maxUnavailable of 2%
* Perform a rolling update of the web1 deployment, changing the Ifccncf/ngmx image version to 1.13
* Roll back the app deployment to the previous version

NO.125 Refer to Exhibit.

Task:
Update the Pod ckad00018-newpod in the ckad00018 namespace to use a NetworkPolicy allowing the Pod to send and receive traffic only to and from the pods web and db