Za darmo · bez rejestracji · bez limitu czasu
Gotowe quizy z pytaniami zamkniętymi, sprawdzone ręcznie. Rozwiąż dowolny darmowy quiz online — każda odpowiedź ma wyjaśnienie, a każdy quiz pełny klucz odpowiedzi do powtórki.
Wczytywanie quizów
Za darmo · bez rejestracji · bez limitu czasu
Gotowe quizy z pytaniami zamkniętymi, sprawdzone ręcznie. Rozwiąż dowolny darmowy quiz online — każda odpowiedź ma wyjaśnienie, a każdy quiz pełny klucz odpowiedzi do powtórki.
IT
Deepen your technical knowledge of Linux namespaces, cgroups, Kubernetes control plane internals, CNI, and CRI. Odpowiadaj na pytania i od razu sprawdzaj, czy to dobra odpowiedź — zawsze z wyjaśnieniem.
Darmowy test próbny z 16 pytaniami zamkniętymi z kategorii IT. Każde pytanie ma jedną poprawną odpowiedź i krótkie wyjaśnienie, a pełny klucz odpowiedzi pod quizem służy jako ściąga do nauki. Bez konta, bez limitu czasu — rozwiązuj, ile chcesz.
To darmowy quiz z 16 pytaniami zamkniętymi. Po każdej odpowiedzi zobaczysz, czy była poprawna, razem z wyjaśnieniem. Bez rejestracji i bez limitu czasu — rozwiązuj go, ile razy chcesz, a klucz odpowiedzi powyżej wykorzystaj do powtórki przed quizem albo po nim.
Poprawna odpowiedź: BNamespaces
Linux namespaces (PID, mount, network, IPC, UTS, user) isolate what a process can see, while cgroups limit how many resources (CPU, memory, I/O) it can consume.
Poprawna odpowiedź: Bcgroups v2 provides a unified hierarchy, resolving resource controller conflicts and supporting rootless containers cleanly
cgroups v2 unifies resource management under a single hierarchy, eliminating cross-controller deadlocks, improving memory-pressure metrics, and supporting rootless cgroups.
Poprawna odpowiedź: BIt defines a gRPC interface allowing the kubelet to interact with different container runtimes (like containerd or CRI-O)
The CRI is a gRPC specification enabling the kubelet to manage container lifecycles against various container runtimes (containerd, CRI-O) without modifying Kubernetes core code.
Poprawna odpowiedź: Cetcd
etcd is a strongly consistent, distributed key-value store that acts as the single source of truth for all Kubernetes cluster state and specifications.
Poprawna odpowiedź: BThe Linux Out-Of-Memory (OOM) killer terminates a process within the container (OOMKilled, exit code 137)
When memory usage breaches the cgroup limit, the Linux kernel triggers the OOM killer on that container, terminating the offending process and setting the Pod state to OOMKilled.
Poprawna odpowiedź: AIt merges multiple read-only lower directories with a single read-write upper directory into a unified view
OverlayFS uses stacked read-only layers (lowerdir) from the container image and presents a single writable layer (upperdir) on top using copy-on-write mechanics.
Poprawna odpowiedź: BMaintaining network rules on nodes (via iptables or IPVS) to route Service clusterIP traffic to backend Pods
kube-proxy watches the API server for Service and Endpoints objects and configures iptables, IPVS, or eBPF rules on the host to route service traffic to Pod IPs.
Poprawna odpowiedź: BTo initialize and hold the shared network and IPC namespaces for all containers in the Pod
The Pause container starts first to set up the network, IPC, and UTS namespaces; all other containers in the Pod join these shared namespaces, allowing them to communicate over localhost.
Poprawna odpowiedź: BIt inspects and potentially modifies an object payload before schema validation and storage in etcd
Mutating admission webhooks run before validating webhooks and etcd persistence, allowing admission controllers (like Istio sidecar injectors) to mutate resource definitions dynamically.
Poprawna odpowiedź: BIt provides binary plugins called by the runtime to allocate IP addresses and wire network interfaces into Pod namespaces
When a Pod sandbox is created, the container runtime invokes the configured CNI plugin (e.g., Calico, Cilium) to set up virtual Ethernet interfaces, configure routing, and assign an IP.
Poprawna odpowiedź: BNodePort exposes a high static port on every cluster node; Ingress acts as an intelligent Layer 7 reverse proxy routing to Services
NodePort exposes a Service across a dedicated high-range port (30000-32767) on all node IPs (Layer 4), whereas an Ingress controller provides Layer 7 reverse-proxying, SSL termination, and path routing.
Poprawna odpowiedź: BThe minimum number or percentage of Pod replicas that must remain available during voluntary disruptions (like node drains)
A PDB limits the number of concurrently disrupted Pods during planned cluster administrative maintenance (like node upgrades and kubectl drain), preventing accidental application downtime.
Poprawna odpowiedź: BExtended Berkeley Packet Filter (eBPF)
Cilium leverages eBPF inside the Linux kernel to attach programs directly to network sockets and interfaces, routing packets efficiently without traversing complex iptables rule chains.
Poprawna odpowiedź: ATaints repel Pods from nodes unless the Pod possesses a matching toleration; affinities attract Pods to nodes
Taints are applied to nodes to repel Pods that do not explicitly tolerate the taint, whereas Node Affinity rules attract Pods to nodes matching specified label conditions.
Poprawna odpowiedź: BExisting Pods continue executing normally, but newly created Pods remain in a 'Pending' state
The scheduler is only involved in assigning unbound Pods to nodes; if it fails, existing running Pods continue unaffected, but newly requested Pods remain unscheduled in 'Pending'.
Poprawna odpowiedź: BIt ensures that if an attacker escapes the container, they only have unprivileged user access on the host
Rootless containers map the container's root user (UID 0) to a non-privileged UID on the host via user namespaces, preventing container escape exploits from gaining full host root privileges.