Beginner Docker & Kubernetes test (Beginner)

Sample questions

5 sample questions from the Beginner Docker & Kubernetes test, with the answers. Samples are taken out of the live test, so you will not meet these when you sit it.

1. When comparing NodePort and ClusterIP service types in Kubernetes, which statement accurately describes their use cases and when each should be chosen?

   1. NodePort service type is used for external communication, while ClusterIP is used for internal communication. NodePort is chosen for services that do not need external access, and ClusterIP is used when external access is required.
   2. NodePort service type is used to expose services on a specific port across all nodes in the cluster, while ClusterIP is used for internal communication within the cluster. NodePort is chosen when external access to the service is required, whereas ClusterIP is preferred for services that do not need external access.
   3. NodePort service type is used for internal communication within the cluster, while ClusterIP is used to expose services on a specific port across all nodes in the cluster. NodePort is chosen for services that do not need external access, whereas ClusterIP is preferred when external access is required.
   4. NodePort and ClusterIP are both used for internal communication within the cluster, and there is no difference between them in terms of exposing services externally.

   Answer: B. NodePort service type is used to expose services on a specific port across all nodes in the cluster, while ClusterIP is used for internal communication within the cluster. NodePort is chosen when external access to the service is required, whereas ClusterIP is preferred for services that do not need external access.

   NodePort is a Kubernetes service type that allows external traffic to reach a service by exposing it on a specific port on all nodes in the cluster. ClusterIP is used for internal communication within the cluster and is not accessible from outside the cluster. NodePort is chosen when external access is required, while ClusterIP is preferred for internal services.

2. What happens when you execute the following command: `docker run -v /host/data:/app/data myapp`?

   1. The volume is mounted at /app/data inside the container, but changes are not persisted and are lost upon container restart.
   2. The volume is mounted at /app/data inside the container, and any changes to this directory are persisted outside the container.
   3. The volume is not mounted at all, and the container uses a temporary directory instead.
   4. The volume is mounted at /app/data on the host machine, and changes are reflected inside the container but not outside.

   Answer: B. The volume is mounted at /app/data inside the container, and any changes to this directory are persisted outside the container.

   In Docker, when you use the `-v` or `--mount` flag with `docker run`, you specify the host path and the container path. Changes made to the container path are persisted to the host path, allowing data to survive container restarts or removals. Option 0 correctly describes this behavior. Options 1, 2, and 3 either describe incorrect behavior or misinterpret how volume mounting works.

3. In a Kubernetes Deployment YAML file, which of the following is the correct top-level field that defines the desired state of the Pods managed by the Deployment?

   1. template: { ... }
   2. spec: { ... }
   3. metadata: { ... }
   4. containers: [ ... ]

   Answer: B. spec: { ... }

   In a Kubernetes Deployment YAML file, the `spec` field is required and contains the desired state of the Pods managed by the Deployment. Other options like `metadata` or `template` are not directly used at the top level of the Deployment resource, and `containers` is a field within the `template` section, not at the top level.

4. Which Kubernetes service type is the default and creates a private IP address that is only accessible within the cluster?

   1. NodePort
   2. LoadBalancer
   3. ClusterIP
   4. ExternalName

   Answer: C. ClusterIP

   ClusterIP is the default service type in Kubernetes, and it creates a private IP address that is only accessible within the cluster. NodePort and LoadBalancer are other service types that expose services externally, but they are not the default. ExternalName is used to map a service to a DNS name outside the cluster.

5. When comparing host network mode and bridge mode in Docker, which of the following statements correctly describes their use cases and differences?

   1. Host network mode provides a virtual network for the container, while bridge mode allows a container to share the host's network stack.
   2. Host network mode and bridge mode are functionally identical and can be used interchangeably in all scenarios.
   3. Host network mode allows a container to share the host's network stack, making it suitable for scenarios where direct access to the host's interfaces is required, such as in cases involving network load balancers or when using specific drivers that require direct interface access. Bridge mode, on the other hand, creates a virtual network for the container, isolating it from the host's network stack and providing a more secure and isolated environment. Host mode is typically used in scenarios where network performance is critical, while bridge mode is used for general-purpose container networking.
   4. Host network mode is used for general-purpose container networking, while bridge mode is used for applications requiring direct access to the host's interfaces.

   Answer: C. Host network mode allows a container to share the host's network stack, making it suitable for scenarios where direct access to the host's interfaces is required, such as in cases involving network load balancers or when using specific drivers that require direct interface access. Bridge mode, on the other hand, creates a virtual network for the container, isolating it from the host's network stack and providing a more secure and isolated environment. Host mode is typically used in scenarios where network performance is critical, while bridge mode is used for general-purpose container networking.

   Host network mode provides direct access to the host's network stack, which is useful for certain applications but sacrifices isolation. Bridge mode provides a virtual network, which is more secure and isolated but may not be suitable for all use cases. The choice between the two depends on the specific requirements of the application and the environment.