[2024年06月]更新のC_KYMD_01試験問題と有効なC_KYMD_01問題集PDF [Q19-Q37]

Share

[2024年06月]更新のC_KYMD_01試験問題と有効なC_KYMD_01問題集PDF

C_KYMD_01ブレーン問題集学習ガイドにはヒントとコツで試験合格を目指そう

質問 # 19
How can you create a Kubernetes object from a file?

  • A. kubectl install-from-file <file>
  • B. kubectl install t <file>
  • C. kubectl create -f <file>
  • D. kubectl create -from-file <file>

正解:C

解説:
Explanation
You can use the kubectl create -f command to create a Kubernetes object from a file. The file can be a YAML or JSON file that specifies the configuration of the object, such as its apiVersion, kind, metadata, and spec.
The file can also be a URL that points to a remote file. The kubectl create -f command will send a POST request to the Kubernetes API server with the content of the file, and the API server will create the object according to the file. The other options are not valid kubectl commands. References: Imperative Management of Kubernetes Objects Using Configuration Files, Kubernetes Object Management


質問 # 20
Which proxy pattern is used by the service mesh solution in SAP BTP, Kyma runtime?

  • A. Per-Node
  • B. Per-Container
  • C. Shared library
  • D. Sidecar

正解:D

解説:
Explanation
The service mesh solution in SAP BTP, Kyma runtime is based on Istio, which is one of the most popular service mesh solutions. Istio uses the Sidecar proxy pattern, which means that a proxy is deployed as a sidecar container next to each service. This way, the proxy can intercept and manage the traffic between the services, without requiring any changes in the application code. The proxy also communicates with the Istio control plane, whichprovides configuration and policies for the service mesh. The other options are not valid proxy patterns for the service mesh solution in SAP BTP, Kyma runtime. References: Discovering the Service Mesh
- SAP Learning, Istio Documentation - What is Istio?


質問 # 21
What can be increased or decreased with Horizontal Pod Auto scalers?

  • A. The lifetime of pods
  • B. The number of pods
  • C. The resources of pods

正解:B

解説:
Explanation
A Horizontal Pod Autoscaler (HPA) is a Kubernetes component that automatically scales workloads to additional nodes in response to increased load. Horizontal scaling means that the response to increased load is to deploy more Pods. A Pod is the smallest and simplest unit in the Kubernetes object model that you create or deploy. A Pod represents a running process on your cluster. The HPA does not affect the lifetime or the resources of the pods, but only the number of pods that are created or deleted based on the metrics and the configuration of the HPA. References: Horizontal Pod Autoscaling | Kubernetes, What is Kubernetes Horizontal Pod Autoscaler (HPA)? - Komodor, Pods | Kubernetes.


質問 # 22
What must you do to pull a container image from a private registry? Note: There are 2 correct Answers to this question.

  • A. Provide credentials in the pod manifest via "image Pull Secrets" in spec. template. spec.
  • B. Create a secret with the type "kubernetes.io/docker configjson".
  • C. Create a secret with the type "Opaque"
  • D. Provide credentials in the pod manifest via image Pull Secrets" in "spec template metadata annotations"

正解:A、B


質問 # 23
What are some characteristics of Kubernetes pods? Note: There are 2 correct Answers to this question.

  • A. They are permanent units in Kubernetes.
  • B. They can be terminated and replaced anytime.
  • C. They can contain deployments.
  • D. They are the smallest deployable unit in Kubernetes.

正解:B、D


質問 # 24
You want to run a database migration on SAP BTP, Kyma runtime. Which workload type does SAP recommend you use?

  • A. StatefulSet
  • B. Parallel job
  • C. DeemonSet
  • D. One off/non parallel job

正解:A


質問 # 25
What is the etcd component in a Kubernetes cluster?

  • A. Relational database to store cluster configuration
  • B. Key value store that stores the cluster state and configuration
  • C. Storage to back up deployed applications
  • D. API to manage the cluster

正解:B


質問 # 26
What are some benefits of using the Istio service mesh in SAP BTP, Kyma runtime? Note: There are 3 correct Answers to this question.

  • A. Networking is coupled to the application logic.
  • B. Distributed tracing can be used to trace request flows.
  • C. Mutual TLS is supported for service to service communication.
  • D. Traffic management between services can be controlled.
  • E. Networking is decoupled from the application logic.

正解:C、D、E

解説:
Explanation
Istio is a service mesh that provides a uniform way to secure, connect, and monitor microservices running on different platforms and environments1. SAP BTP, Kyma runtime uses Istio as the default service mesh solution to enable the following benefits2:
Networking is decoupled from the application logic. Istio handles the network traffic between services using a data plane composed of Envoy proxies that are injected as sidecars to each service Pod. This way, the application code does not need to deal with networking aspects such as routing, load balancing, authentication, or encryption3.
Mutual TLS is supported for service to service communication. Istio enables mutual TLS (mTLS) by default for all services in the mesh, ensuring that the traffic is encrypted and authenticated. Istio also manages the certificates and keys for mTLS using a control plane component called Istiod4.
Traffic management between services can be controlled. Istio allows defining and applying traffic policies, such as timeouts, retries, circuit breakers, fault injection, mirroring, or routing rules, using custom resources such as VirtualServices and DestinationRules. These policies can be dynamically configured and updated without requiring service restarts.
References:
1: Discovering Istio - SAP Learning
2: Upcoming breaking change in SAP BTP, Kyma Runtime: Enabling the Istio CNI plugin | SAP Blogs
3: Istio / The Istio service mesh
4: Istio / Secure your service mesh
[5]: Istio / Traffic management overview


質問 # 27
What does a service mesh in Kyma typically consist of? Note: There are 2 correct Answers to this question.

  • A. Worker node
  • B. Control plane
  • C. Master node
  • D. Data plane

正解:B、D

解説:
Explanation
A service mesh in Kyma typically consists of two components: the data plane and the control plane12. The data plane is responsible for handling the communication between the microservices in the cluster. It consists of a set of sidecar proxies (Envoy) that are injected into each pod and intercept the traffic. The control plane is responsible for managing the configuration and policies of the data plane. It consists of a set of components (Istio) that provide features like service discovery, security, traffic management, observability, and more12. References: Discovering the Service Mesh, SAP BTP - KYMA - SERVICE MESH | SAP Blogs


質問 # 28
Which deployment strategy for new versions avoids downtimes?

  • A. Zero downtime
  • B. Recreate
  • C. Rolling update

正解:C


質問 # 29
If an application requires a persistent state between reboots, what must be done before it can be deployed?

  • A. Create a new entry in etcd.
  • B. Create a Persistent Volume in the namespace
  • C. Create a Persistent Volume Claim for a pod.

正解:C

解説:
Explanation
A Persistent Volume Claim (PVC) is a request for storage by a user. It is similar to a Pod, which is a request for compute resources by a user. A PVC enables a Pod to consume a slice of the available storage in the cluster without knowing the details of the underlying storage infrastructure. A PVC is associated with a StorageClass, which defines the type and characteristics of the storage. A PVC is also bound to a Persistent Volume (PV), which is an abstraction of the physical or cloud-based storage resource. A PV is created by the cluster administrator and has a lifecycle independent of any Pod. A PVC can specify the size, access mode, and storage class of the PV it requires. Before deploying an application that needs persistent state, a user must create a PVC for the Pod that will run the application. The PVC will then be automatically bound to a suitable PV by the cluster, or dynamically provisioned if the storage class supports it. The Pod can then mount the PVC as a volumeand access the persistent storage12345. References: Persistent Volumes | Kubernetes, How Kubernetes Persistent Volume Claims Work - CBT Nuggets, Exploring Kubernetes Storage: Persistent Volumes and Persistent Volume Claims - Atatus, Configure a Pod to Use a PersistentVolume for Storage | Kubernetes, kubernetes - How to mount a persistent volume on a Deployment/Pod using PersistentVolumeClaim? - Stack Overflow.


質問 # 30
What is used to isolate groups of resources in a Kubernetes cluster?

  • A. Namespaces
  • B. Semantic versioning
  • C. Object groups
  • D. Organizations and spaces

正解:A

解説:
Explanation
Namespaces are used to isolate groups of resources in a Kubernetes cluster1. Namespaces provide a logical scope for resources, such as pods, services, deployments, and secrets. Namespaces can be used to separate different environments, teams, projects, or applications within the same cluster. Namespaces also enable resource quota management, access control, and service discovery within the cluster2. Namespaces are not the same as organizations and spaces, which are concepts used in Cloud Foundry to manage applications and services3. Semantic versioning is a convention for assigning version numbers to software releases, not a method for isolating resources. Object groups are not a native Kubernetes concept, but a term used in some tools or frameworks to group related resources. References: 1(https://learn.microsoft.com/en-us/azure/aks/operator-best-practices-cluster-isolation), 2(
,


質問 # 31
Which proxy pattern is used by the service mesh solution in SAP BTP, Kyma runtime?

  • A. Per-Node
  • B. Per-Container
  • C. Shared library
  • D. Sidecar

正解:D


質問 # 32
Which Prometheus component must you create to scrape metrics from targets you want to observe?

  • A. Pod Monitor CRD
  • B. Service Manifest
  • C. Service Monitor CRD

正解:C

解説:
Explanation
To scrape metrics from targets you want to observe, you need to create a Service Monitor Custom Resource Definition (CRD) in Prometheus. A Service Monitor CRD defines the endpoints, ports, paths, and labels of the targets that expose metrics in a standard Prometheus format. The Service Monitor CRD also specifies how often the targets should be scraped and what relabeling rules should be applied. The Service Monitor CRD is automatically detected and processed by the Prometheus Operator, which creates the appropriate scrape configurations for Prometheus. The other options are not valid components for scraping metrics from targets.
A Pod Monitor CRD is similar to a Service Monitor CRD, but it defines the pods that expose metrics, rather than the services. A Service Manifest is a YAML file that defines the service type, version, and metadata, but it does not specify the metrics endpoints or scraping parameters. References: Side-by-Side Extensibility Based on SAP BTP, Kyma Runtime - Unit 4 - Lesson 2: Observability in Kyma, Prometheus Operator Documentation - Service Monitor


質問 # 33
What are some characteristics of the API Gateway? Note: There are 2 correct Answers to this question.

  • A. It uses a custom-configured Nginx Ingress Gateway.
  • B. It is the central point of contact for all internal traffic in the Kyma cluster.
  • C. It uses Ory Oath keeper to manage access to services.
  • D. It uses Envoy Proxy to handle traffic and forward it to the correct service

正解:B、D


質問 # 34
Which of the following are features of Kubernetes? Note: There are 3 correct Answers to this question.

  • A. Operating system management
  • B. Storage orchestration
  • C. Immutability and self-healing
  • D. Hardware virtualization
  • E. Service Discovery and load balancing

正解:B、C、E

解説:
Explanation
Kubernetes provides several features to manage containerized workloads and services, such as storage orchestration, immutability and self-healing, and service discovery and load balancing. Storage orchestration allows users to mount any storage system they want using Kubernetes, including local storage, public cloud providers, and more. Immutability and self-healing ensure that containers are always in the desired state and can recover from failures automatically. Service discovery and load balancing enable users to expose their services to the network and distribute the traffic among multiple instances. References:
https://kubernetes.io/docs/concepts/overview/
https://www.tutorialspoint.com/kubernetes/kubernetes_overview.htm


質問 # 35
You have deployed a workload through a Kubernetes Deployment to SAP BTP, Kyma runtime. What must you do to expose the workload to the public internet? Note: There are 3 correct Answers to this question.

  • A. Create a service to group your pods.
  • B. Create an API Rule CR.
  • C. Add a custom Virtual Service CR to secure the service.
  • D. Add a readiness probe for your workload.
  • E. Configure rules and access Strategies.

正解:B、D、E


質問 # 36
If an application requires a persistent state between reboots, what must be done before it can be deployed?

  • A. Create a new entry in etcd.
  • B. Create a Persistent Volume in the namespace
  • C. Create a Persistent Volume Claim for a pod.

正解:C


質問 # 37
......

C_KYMD_01試験問題無料PDFダウンロード 最近更新された問題です:https://www.passtest.jp/SAP/C_KYMD_01-shiken.html

C_KYMD_01認定試験問題集には62練習テスト問題:https://drive.google.com/open?id=1JUmxtcUVuITIhwHarK5DBv8zb5ccolX0