Practice Test GeeksAWS Practice Test
← All AWS Flashcard Decks

Container Services Flashcards

7 cards from real AWS practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Container Services flashcards as text

  1. Which EKS add-on provides the CNI plugin responsible for assigning VPC IP addresses directly to Kubernetes pods?

    Answer: Amazon VPC CNI

    The Amazon VPC CNI plugin assigns each pod an IP address from the VPC subnet, enabling pods to communicate natively within the VPC.

  2. A DevOps engineer needs to ensure that only images from a specific ECR repository can be deployed to an ECS cluster. Which mechanism enforces this?

    Answer: IAM task execution role with an explicit Deny for other registries

    An IAM policy on the ECS task execution role can explicitly deny pull actions on ECR repositories outside the approved list, enforcing image source control.

  3. In Amazon EKS, what is the purpose of IRSA (IAM Roles for Service Accounts)?

    Answer: It maps Kubernetes service accounts to IAM roles, granting pods fine-grained AWS permissions

    IRSA uses OIDC federation to let individual Kubernetes pods assume specific IAM roles without sharing node-level credentials.

  4. When using AWS CodeBuild to build a Docker image in a CI/CD pipeline, which CodeBuild environment setting is required to run Docker commands?

    Answer: Enable privileged mode in the build environment

    Docker-in-Docker requires the CodeBuild environment to run with privileged mode enabled, which grants the build container elevated Linux capabilities.

  5. Which Kubernetes resource should a DevOps engineer use to store non-sensitive configuration data (e.g., environment variables) that pods can consume?

    Answer: ConfigMap

    ConfigMaps store non-sensitive key-value configuration that pods can consume as environment variables or mounted files, keeping config separate from the container image.

  6. What is the effect of setting 'minimumHealthyPercent: 100' and 'maximumPercent: 200' in an ECS rolling deployment configuration?

    Answer: ECS launches new tasks alongside old ones, doubling capacity temporarily before draining old tasks

    With 100% minimum healthy and 200% maximum, ECS starts new tasks first (doubling capacity) and only terminates old tasks after the new ones pass health checks.

  7. Which tool is used to define, package, and deploy Kubernetes applications as versioned charts in EKS, simplifying complex manifest management?

    Answer: Helm

    Helm is the Kubernetes package manager that bundles manifests into charts with templating and versioning, making application deployments repeatable and configurable.