S
Certified Kubernetes Administrator (CKA) ACTUAL
PERFORMANCE TASK SIMULATION 2026/2027 | Hands-
On kubectl Tasks | No Multiple Choice | Exam Environment
Simulation | Pass Guaranteed - A+ Graded
DOMAIN 1: CLUSTER ARCHITECTURE, INSTALLATION & CONFIGURATION (4
Tasks)
Task 1: Create a new ClusterRole named pod-reader that grants permissions to get, list, and
watch pods in the cluster. Then create a ClusterRoleBinding named pod-reader-binding that
assigns this role to the ServiceAccount default in the namespace development.
Correct Solution:
bash
Copy
kubectl create clusterrole pod-reader --verb=get,list,watch --resource=pods
kubectl create clusterrolebinding pod-reader-binding --clusterrole=pod-reader --
serviceaccount=development:default
Task 2: You need to upgrade a kubeadm cluster from Kubernetes v1.28.x to v1.29.x. The control
plane node is cp-node-1. Perform the upgrade following best practices: drain the node, upgrade
kubeadm, upgrade the control plane components, upgrade kubelet and kubectl, then uncordon the
node. Provide the key commands in sequence.
Correct Solution:
bash
Copy
# On cp-node-1
kubectl drain cp-node-1 --ignore-daemonsets
, S
# Upgrade kubeadm
sudo apt-mark unhold kubeadm && \
sudo apt-get update && sudo apt-get install -y kubeadm=1.29.x-00 && \
sudo apt-mark hold kubeadm
# Verify and apply upgrade
sudo kubeadm upgrade plan
sudo kubeadm upgrade apply v1.29.x
# Upgrade kubelet and kubectl
sudo apt-mark unhold kubelet kubectl && \
sudo apt-get update && \
sudo apt-get install -y kubelet=1.29.x-00 kubectl=1.29.x-00 && \
sudo apt-mark hold kubelet kubectl
# Restart kubelet
sudo systemctl daemon-reload
sudo systemctl restart kubelet
# Uncordon node
kubectl uncordon cp-node-1
Task 3: Create a backup of the etcd cluster running at https://127.0.0.1:2379 using the etcdctl
snapshot save command. Use the CA certificate at /etc/kubernetes/pki/etcd/ca.crt, the client
certificate at /etc/kubernetes/pki/etcd/server.crt, and the client key at
/etc/kubernetes/pki/etcd/server.key. Save the snapshot to /opt/etcd-backup.db.
Correct Solution:
bash
Certified Kubernetes Administrator (CKA) ACTUAL
PERFORMANCE TASK SIMULATION 2026/2027 | Hands-
On kubectl Tasks | No Multiple Choice | Exam Environment
Simulation | Pass Guaranteed - A+ Graded
DOMAIN 1: CLUSTER ARCHITECTURE, INSTALLATION & CONFIGURATION (4
Tasks)
Task 1: Create a new ClusterRole named pod-reader that grants permissions to get, list, and
watch pods in the cluster. Then create a ClusterRoleBinding named pod-reader-binding that
assigns this role to the ServiceAccount default in the namespace development.
Correct Solution:
bash
Copy
kubectl create clusterrole pod-reader --verb=get,list,watch --resource=pods
kubectl create clusterrolebinding pod-reader-binding --clusterrole=pod-reader --
serviceaccount=development:default
Task 2: You need to upgrade a kubeadm cluster from Kubernetes v1.28.x to v1.29.x. The control
plane node is cp-node-1. Perform the upgrade following best practices: drain the node, upgrade
kubeadm, upgrade the control plane components, upgrade kubelet and kubectl, then uncordon the
node. Provide the key commands in sequence.
Correct Solution:
bash
Copy
# On cp-node-1
kubectl drain cp-node-1 --ignore-daemonsets
, S
# Upgrade kubeadm
sudo apt-mark unhold kubeadm && \
sudo apt-get update && sudo apt-get install -y kubeadm=1.29.x-00 && \
sudo apt-mark hold kubeadm
# Verify and apply upgrade
sudo kubeadm upgrade plan
sudo kubeadm upgrade apply v1.29.x
# Upgrade kubelet and kubectl
sudo apt-mark unhold kubelet kubectl && \
sudo apt-get update && \
sudo apt-get install -y kubelet=1.29.x-00 kubectl=1.29.x-00 && \
sudo apt-mark hold kubelet kubectl
# Restart kubelet
sudo systemctl daemon-reload
sudo systemctl restart kubelet
# Uncordon node
kubectl uncordon cp-node-1
Task 3: Create a backup of the etcd cluster running at https://127.0.0.1:2379 using the etcdctl
snapshot save command. Use the CA certificate at /etc/kubernetes/pki/etcd/ca.crt, the client
certificate at /etc/kubernetes/pki/etcd/server.crt, and the client key at
/etc/kubernetes/pki/etcd/server.key. Save the snapshot to /opt/etcd-backup.db.
Correct Solution:
bash
