Hello everyone.
So this is the answer section for the secret a practice exam to
so let's get started.
If you click on the example it launches this UI and as you can see you've called eight questions or
percentage of hundred about three to four of these questions are of easy difficulty and the remaining
ones are about intermediate or difficult.
So according to the difficulty of the questions the questions are created some of them have been age
of 10.
Some of them have 14 or so on and so forth.
So let's have a quick look at the test environment.
So this one is a two node cluster and there is a silver called Monster and mode sort of one which is
a look of okay.
So let's go to the first question.
The first question is take a backup of the city cluster and save it to slash stamp it's city backup
dog D.B..
That's easy enough for us.
We can make use of the equipment that is documentation.
So is it documentation.
And to take of snapshot are deeply backup the command to be run as its ADC deals snapshots safe and
he is a nice little example.
The one thing to note in our scenario is that we have to pass the certificate.
So there is a handy little trick to do that.
First let's check the mission of the CDC deal that's installed.
So the vision of three feet is exactly what we want.
Now let's go to the core when it is equal when it is manifest our folder which is where the configuration
details of the static pods are stored.
And if you check the CDC field or the animal file you can see all the parameters that need to go into
our command.
So let's copy it from here.
So I just commentated out for making it easy and that's the entire command strength.
And now to check that does come on Woods let's just do our member list as you can see it works.
So now we can take a snapshot.
Michael come on us snapshot.
Save and this is described here and the documentation as well.
And let's go back to the question and copy that.
Free.
So there you go.
Let's start to verify that it's working properly.
Let's to us absolute status
and drive to the table.
There you go.
That's question number one on TV
and let's move on to the question number two to the question number two as crude a called elephant bird
and make sure this.
Let's see your request at 2 1 and memory request has two hundred might be OK.
And that also has a rate of 10 that's easy enough.
So let's get started.
So for those what I would do is create
a template file using cube CTO Ron
that's double temperance support Nimbus relevant in major case
this scale use to try it on feature so that the port is not created and to the contents yellow file
number you're dedicated to a file let's call the file the same name as that of three port
and now we can edit this file so as you can see there is also already a resource section which is empty
so we can add our source the request section here.
Make sure it's correct is.
Yeah.
During my
won't there should be at
the board using q CPO bash F F and not him.
And to make sure that it's created properly we can run my cube CTO describe poor elephant as you can
see the request is a C P is equal to 1 and is equal to two hundred and.
Which is exactly what is asked for and the question and the name of the party's elephant so we can go
to the next one.
Okay so the next question is to create a new part called super user board but image the Xbox One point
to it.
So we have to use a specific version of the port to be able to set system time and the container should
sleep for forty eight hundred seconds.
So this is a security context related question so let's go back to when it is documentation.
Alright so here is the relevant documentation that can be found or the task configure port container
and security context.
And as you can see here this is configured within the board port deployment template and as this field
calls security context and you just have to add capabilities with an add feature.
And in this case we just have to use system time.
Let's go back to our terminal here and since we already have a pad definition file for the previous
exercise we can copy that.
And let's add the planes or port not Yemen.
Let's make changes we'll need labels here so I'm going to delete it here and then let's rename the port
name to
preserve port
Rosa Parks.
Want to add
me can be seen as a port
you don't need the resources section here so I'm going to delete it if I don't need any of the other
ones.
So remove all of the links now here.
Right.
Don't security context
capabilities yet to add this.
Let's go back to the documentation.
Make sure that's correct so security context with a capital C capabilities.
Add and we don't need a net admin yet so that should be that and the other thing that we also wanted
to add was the command field because this is a busy box and major it will exit if it does not have a
startup Come on.
So lets this for most of sleep for
48 seconds.
Let's just make sure everything is right.
So the name is super iPhone user I haven't bought the Xbox One to eight what 800 seconds.
Interesting.
The Xbox super user board may want to continue the same as a command facility for data entry and capabilities
to time.
Its create spot.
That's created we can draw on cube CTO described on super user porn just to make sure that it's running
is running fully for 800 to name that's exactly what we need.
OK so that's the question done let's move on to the next question.
OK so the next question is about definition file is created at slash route use BBDO to make use of this
manifest file and multiple source in volume called up if you haven't won and show the bodies running
and the baby is born.
So baby is already being created and that as part manifests file a framework of that which is created
and the static tree.
So we have to create a process in you claim and here are the specifications for that so as an own part
and the name of deposits in London.
Then you have to make sure that the part is running and that it's using this process in place.
OK so let's go back to our terminal here.
The first thing that you have to check is if there is indeed.
Does this in William or really just created.
So there you go.
So that as a baby hyphen one which has a capacity of ten and my but read right once X is more and it's
available so there is no process and volume claim that has been created.
So to do that let's go back to date when it is documentation.
Okay so here is the documentation.
And as you can see we just have to create a processing volume claim since we already have a processing
volume created for us.
So yeah as an example that we can reference maybe a wish list being one kind as process and volume claim
and we just have to fill in the details for the correct specification provided and the question.
OK so let's create a PDC calendar and we know that the API version 0 2 the one must me here kind equal
to this trend or William
the of people sworn in as my PDC
specification the first one as the head.
That's a sports let we just have one word as you read right.
Bonds let's go back to the documentation.
Next one that voted for felon as the air resources section so we can copy it from here.
Let's make sure that Majesty persists in logging it.
Why did we find my BBC access minus yeah once let's create does
scary how opposition while claim that that's great.
Let's check the status papers this morning itself and now as you can see it's in the balance sheets
and it's being used by the claim that we just created.
So the next task is for us to make use of the.
So this has already been created for us.
So we'll just make sure that we enter the details for the purposes and what you claim here and then
wandered as well.
So if you go back to the documentation you can see a section called as claims as volumes.
This has got an example of what we can do to mount the process linoleum clean as a volume.
So the only thing that we have to do here is copy this line here.
We don't need all the resources DNS policy or any of these so we can add the volume on section here
and make sure that this month orders exactly what was mentioned and the question.
So this one should be slash data as against here and this name can be anything.
That's basically the name of the volume that is period you'll find in just make sure the syntax is correct
and Muslims can copy these as well
yes it need since we have already named my PDA.
Just leave it as it does and make sure it's all aligned properly.
The clean name should be my MVC
right.
So let's create a
know it has been created
let's quickly check the status it's running.
And if you see under the volume section does the volume name.
And that is making use of this processing volume claim and the claim name as my PDC.
And if you check the status of TPB it should be in a balance sheet so.
So that's the question that's completed.
OK.
Let's move on to the next question
OK.
So the next question is create a new deployment called engine X deploying with image engine x 1 1 6
and 1 replica record division.
Next.
The deployment to vision 1 not 1 7 using rolling update.
Make sure that the illusion of created is recorded and the results on rotation.
OK so for us we have to begin with the specific version but just one replica and make sure that's recorded
and upgraded to wonder 1 7.
I'll also make sure that it's recorded.
OK.
So let's go back to the terminal screen here.
So keep to your name of the department should be in Gen X deploy
image.
It's copied from here.
That has engine X wondered 16
because one which is a default anyway so you can just not turn into that.
And we have to record the working
year and keep CTO deployments still creating and able.
Well there's one order one which is really and to check the the revision and they recorded annotation
that we have passed earlier or that we do that.
There you go.
So that is iPhone F and record.
So in order to protect us we can't simply run cube CTO
or load history appointment and the name of the department which is engine next deploying as you can
see the frustration as the change cause which is recorded here and that's the exact amount I fear right.
OK so let's go back to the question.
The next step is to upgrade the deployment to wish and wondered 1 7 using a rolling update and make
sure that's recorded as well.
OK.
So we can make use of QCT old said image deployment.
Name of the deployment here from here.
And then name of the container which is also our engine is deploying and the vision of the country another
it has a boardroom which as in 10x wandered 1 7
record plus it's a
command has been completed successfully.
Let's check the status of the deployment.
Let's quickly check the major vision so it can see that that has changed to into next 1.0 1 7
QCT on Gen X deploy
that has been created 40 second so you can describe just to make sure that the board has been updated
and that has been updated as well.
OK so now let's go back to the rollout is straight.
Come on
and as you can see the second division as the cheese that we mean Richard said image from one on 1 6
2 under 1 7
and I think that should be and deployment looked into next deploy the initial vision as engine X1 or
16 upgrade the to wonder what's the one under 14 to see if this is completed you can want to be next
question
okay for this question we have to create a new user called John Grant him access to the classroom John
should have permission to create list get updates and reports on the development namespace the private
key exists in location slash all John Key and CSR slash John load CSA.
Okay so let's go back to our terminal here and make sure that the two files have been created this as
you can see there is a John Key and using that key job John not CSR has already been created.
So photos will make use of equal equipment it is documentation to create a certificate signing request.
So we are here the documentation.
This can be found on the tier list and managing tailors in a cluster.
And here is a sample CSR file.
So the API vision as certificates of gains for you.
We can also check this from the come online to see if your uncle TTL API versions and graph for already
figured you'll see that retro tenancy their vision which should be the same as you are.
That you can see the documentation.
So yeah let's create this CSR.
So I'm going to call this file as of I John Dot.
Yeah.
La API evolution I'm just going to copy that land from the documentation
and that name shouldn't be in the question so does his own name should be John knife and developer status
should be approved and we have to create the required rules for him to be able to access and do the
actions of all parts and the developer namespace.
So John hyphen deliverers a name just copied from your
let's set the specs section there is a request which is the CSR itself.
And then yeah
and the U.S. just I'll just copy from you.
That's digital signature key and so far meant and so.
So now let's go back to our file which has been auto created for it is called John Doe CSR and it is
Base64 encoded and then using translate t are delimited by it and you'll need to remove the new line
that should be it's over the copy thing until you're
Let's go back to the file
basically.
That shouldn't be it to screen deal create.
John.
There you go.
CSR has been created that can really fly dust by running keeps detailed CSR.
I can see that's an abandoned ship so we have to approve it a cube CDL Certificate of proof.
John I've been there.
It has been approved.
That's number I can as you can see it's in an approved state.
So that's of the question that's completed.
It's go back to the documentation.
OK so the second task is for us to create a own name called a local the name places developmental sorts
of spots and all the groups associated with natural that's created using the imperative CTO to create
it.
Well the name of the role I just copied from that stirred up our
resource as equal to parts of the French word.
I'm just going to copy it from the question
make correction to this syntax so that it should all be separated
in its own right but namespace as you go with a marked
what's the purpose and the namespace looks all right that has been created.
We can run a quick TTL
describe or
namespace and so on.
Right.
So now let's go to the next section of the question.
So John should I have the appropriate access.
So we'll have to create a plus several binding nautical sorry a rule binding.
Does it have a name that's mentioned here not so we can create a.
Cube CTO create binding and I'm just going to call it color.
So don't look where the role.
One thing
and the wrong name as their number which we created in the previous task the user should be John
in space should be
that has been created.
Let's do it quick.
Describe rule by ending
as it can see user John and it as the development namespace and the binding has been created.
Camp that looks like that as complete the question just to verify.
Let's run a couple of quick commands to test if John has access so can use in detail what can I.
Let's take one of the quotes from the question so update two parts.
If I just run this as it as a charity is because this is being run as the queue when it is admin user
will keep an eye for an effort as John should say no because you're not specified in namespace so let's
try that
yep.
John has access to data ports.
Let's try a couple of further loops which we added last words and delete
yes in here.
So let's try watch bots which will not agree.
So they should come back but no
they look at all the required permissions has been set.
Then we can go onto the next question.
OK so the next question is create an engine export called engine nexus over using image engine X expose
it internally with a service called engine X result the service does that you're able to look up these
service and Ford names from within the cluster recalled the results and slash through the engine next
door.
SPC and slash road engine start.
So in this case we have to create a board exploit that as a service and run it.
And that's look up against the service as well as the port.
Name the port IP and then record the results.
And these two specific faults.
OK so let's go back to the tail no
to begin with.
Go create the board
just copy the name from your
ranches and tunics
copy the name bounty inserts
and yet to use the port which for engine export be port 80.
The target port would also remain possible dating and you can use hyphen item type to describe the cluster
the service type.
This is by default a straight piece of this can be a if needed.
The remaining things are needed especially the high enough input particularly to expose board engine
X's over and create the service name by engine extras overhype and so this should be it
that's a syntax error so you have to use hyphen F and name that you've got to scribe SPDC and index
was over was
when you can see.
This was all going to a cluster IBM.
It has got one end point so this should be the IP address of the part
yes.
If you're on a hyphen or wide against the port name you can see that the port name is a standard 32
dots or fly support the port and the service has been created.
This was a great mistake to keep it
right that should be good enough for the first part of this question.
Okay so the second part of this question is that we have to test and this look up against the servers
and port name so we'll run our busy box spot to test that okay.
So back to the terminal we will create a visible spot to test the entrance look up to the service handy
port name
that's named before this test.
Look up
we should be busy OK.
But keep in mind that certain versions of the Xbox does not trendiness utilize correctly.
What that means is that it is not able to do an endless lookup correctly so he loved to use a specific
image such as busy Box 1 2 8
wife and I found out when I did I smoke
apply it to Mr. Cook.
Come on
so first it was tested against the service name
and see if it looks
in this case it was able to resolve it.
So let's run that command again and they were the output to the file.
Let's check the contents
yes you can see that the address has been recorded.
Can Ignore any other things that it has recorded as well.
So the next one we have to try to resolve the port itself.
And for that we're all the same.
Come on what we'll have to get the IP address on the port itself.
So you can see that the operators IP addresses found out today to those who were not fired.
So in this case you have to replace these dots or they full stop.
But events can pay from 22 to from 0 5 5 dot the namespace default dot port.
They should be saved to Internet start port
that song.
Let's see if commandos successful.
And as you can see it has been able to resolve it.
And that's the name that trace results all this remember to replace the dots with hyphen.
And you have to kill the name space and port and this can further be extended to port dot a closer look
at
that's all details for this question so we can mark this is complete and go to the final question
OK.
So let's go to the final question of those exact so for this one.
Create a static port on Node 0 1 called into next life in critical but a major engine X create this
port on Node sort of 1 and make sure that it is re created restarted automatically in case of a failure.
And you're specifying the port to be used for the subject.
So this essentially means that we have to create a static port and loans or one and the name should
be engineered safe and critical and they may just just enter next.
So Cumulus should be configured for started ports on into next and critical.
That's an OK let's go back to the terminal.
Let's run cube city and get nodes let's again see notes or one that's already shared so let's pass assets
to that node
so the possible as this as it is enabled by default we can go to nodes or one from the master.
And before we do anything else let's check the status of the cube later this that's funny.
You can set the parameters here
and the configuration for Slash white lab cube led conflict again.
OK
and here
so the static port path in this case is already there.
If it's not there you have to add it here and make sure that cube it as restarting so since it's already
here we don't have to do anything else.
This is already part of the Cupola configuration.
So let's see if that folder exists.
In this case we don't have that directory.
Let's create one
so lit consequent for static bolts.
So we have created this directory and now we have to place a poor definition file but that directory.
So let me go back to the alone and run QC tail run generator.
So I'm just going to copy the contents from Master node.
No go back to a node 0 1 2 they will canon and go to the directory that we just created.
And the name should be internet safe and critical.
It's the contents here
make sure the syntax is correct.
So right.
So I don't have to create it because this part is already configured in the cube lid as a static body
part.
So it should take care of creating this automatically we can check what Dr.
you can see that there is one that is running on this node already that's OK.
So let's go back to the last note so that we can run the country deal to check the status
so as you can see here there is one that is created.
Thirty nine seconds ago called enter next F and critical and this is the the node name bear at the static
borders created.
This was must show that it would be called as I can muster such as muscle decontrol being competence.
But in this case since it's only work of node not sort of one it has got tick of the name of sort or
one.
So that's it.
Let's just verify that everything is correctly set up to create a static or not the one that's a name
that we just have to specify the image and then yeah we've already created this thought and nodes that
are one which has made use by complete service and then for age and next effort critical for node 0
1 is up and running which it does.
So that's the end of those exact let's go forward and see if you've got all the answers correct.
Okay so let's just click on and example you can type your name here
on the test strong and hopefully you've got everything correct.
So there you go.
Hundred percent.
So that's just confirms that we have set all the eggs.
All the questions correctly and that has been calculated and that's your score and the possible send
data center for one good thing about the test is that you can go back and attempt it again and test
again in case you record any question wrong here.
There should also be hints that you can make use of which is available after the exam has been ended
and try again and tried to get a better school and attempt as many times as it takes.
So thank you.
I hope that this was useful.