Linux Foundation Certified Kubernetes Security Specialist (CKS) - Linux Foundation

Exam Questions

94%

Students found the real exam almost the same

1,057

Students passed this exam after ExamsQA Prep

95.1%

Average score during Real Exams at the Testing Centre

💡

Browse at least 50% questions to maximize your chances of passing

Free Preview Questions

Sample CKS Exam Questions & Explanations

Practice with real question formats, multiple choice options, and detailed answer explanations for Linux Foundation CKS.

Question #1 Verified Q&A
An upstream system has been configured to pass the date for a given batch of data to the Databricks Jobs API as a parameter. The notebook to be scheduled will use this parameter to load data with the following code:<br />
df = spark.read.format("parquet").load(f"/mnt/source/(date)")<br />
<br />
Which code block should be used to create the date Python variable used in the above code block?
A dbutils.widgets.text("date", "null")date = dbutils.widgets.get("date")
B input_dict = input()date= input_dict["date"]
C date = spark.conf.get("date")
D import sysdate = sys.argv[1]
E date = dbutils.notebooks.getParam("date")
Correct Answer: dbutils.widgets.text("date", "null")date = dbutils.widgets.get("date")
Explanation:
The code block that should be used to create the date Python variable used in the above code block is: dbutils.widgets.text(“date”, “null”) date = dbutils.widgets.get(“date”) This code block uses the dbutils.widgets API to create and get a text widget named “date” that can accept a string value as a parameter1. The default value of the widget is “null”, which means that if no parameter is passed, the date variable will be “null”. However, if a parameter is passed through the Databricks Jobs API, the date variable will be assigned the value of the parameter. For example, if the parameter is “2021-11-01”, the date variable will be “2021-11-01”. This way, the notebook can use the date variable to load data from the specified path.<br />
<br />
The other options are not correct, because:<br />
<br />
Option A is incorrect because spark.conf.get(“date”) is not a valid way to get a parameter passed through the Databricks Jobs API. The spark.conf API is used to get or set Spark configuration properties, not notebook parameters2.<br />
<br />
Option B is incorrect because input() is not a valid way to get a parameter passed through the Databricks Jobs API. The input() function is used to get user input from the standard input stream, not from the API request3.<br />
<br />
Option C is incorrect because sys.argv1 is not a valid way to get a parameter passed through the Databricks Jobs API. The sys.argv list is used to get the command-line arguments passed to a Python script, not to a notebook4.<br />
<br />
Option D is incorrect because dbutils.notebooks.getParam(“date”) is not a valid way to get a parameter passed through the Databricks Jobs API. The dbutils.notebooks API is used to get or set notebook parameters when running a notebook as a job or as a subnotebook, not when passing parameters through the API5.<br />
<br />
Reference: Widgets, Spark Configuration, input(), sys.argv, Notebooks
Question #2 Verified Q&A
The Databricks workspace administrator has configured interactive clusters for each of the data engineering groups. To control costs, clusters are set to terminate after 30 minutes of inactivity. Each user should be able to execute workloads against their assigned clusters at any time of the day. Assuming users have been added to a workspace but not granted any permissions, which of the following describes the minimal permissions a user would need to start and attach to an already configured cluster.
A Cluster creation allowed. "Can Restart" privileges on the required cluster
B Workspace Admin privileges, cluster creation allowed. "Can Attach To" privileges on the required cluster
C "Can Manage" privileges on the required cluster
D Cluster creation allowed. "Can Attach To" privileges on the required cluster
E "Can Restart" privileges on the required cluster
Correct Answer: "Can Restart" privileges on the required cluster
Explanation:
https://learn.microsoft.com/en-us/azure/databricks/security/auth-authz/access-control/cluster-acl https://docs.databricks.com/en/security/auth-authz/access-control/cluster-acl.html
Question #3 Verified Q&A
When scheduling Structured Streaming jobs for production, which configuration automatically recovers from query failures and keeps costs low?
A Cluster: Existing All-Purpose Cluster;Retries: None;Maximum Concurrent Runs: 1
B Cluster: New Job Cluster;Retries: None;Maximum Concurrent Runs: 1
C Cluster: New Job Cluster;Retries: Unlimited;Maximum Concurrent Runs: Unlimited
D Cluster: Existing All-Purpose Cluster;Retries: Unlimited;Maximum Concurrent Runs: 1
E Cluster: New Job Cluster;Retries: Unlimited;Maximum Concurrent Runs: 1
Correct Answer: Cluster: New Job Cluster;Retries: Unlimited;Maximum Concurrent Runs: 1
Explanation:
Maximum concurrent runs: Set to 1. There must be only one instance of each query concurrently active. Retries: Set to Unlimited. https://docs.databricks.com/en/structured-streaming/query- recovery.html
Question #4 Verified Q&A
The data engineering team has configured a Databricks SQL query and alert to monitor the values in a Delta Lake table. The recent_sensor_recordings table contains an identifying sensor_id alongside the timestamp and temperature for the most recent 5 minutes of recordings.<br />
<br />
The below query is used to create the alert: The query is set to refresh each minute and always completes in less than 10 seconds. The alert is set to trigger when mean (temperature) > 120. Notifications are triggered to be sent at most every 1 minute.<br />
If this alert raises notifications for 3 consecutive minutes and then stops, which statement must be<br />
true?
A The average temperature recordings for at least one sensor exceeded 120 on three consecutive executions of the query
B The recent_sensor_recordingstable was unresponsive for three consecutive runs of the query
C The total average temperature across all sensors exceeded 120 on three consecutive executions of the query
D The source query failed to update properly for three consecutive minutes and then restarted
E The maximum temperature recording for at least one sensor exceeded 120 on three consecutive executions of the query
Correct Answer: The average temperature recordings for at least one sensor exceeded 120 on three consecutive executions of the query
Explanation:
This is the correct answer because the query is using a GROUP BY clause on the sensor_id column,<br />
<br />
which means it will calculate the mean temperature for each sensor separately. The alert will trigger<br />
<br />
when the mean temperature for any sensor is greater than 120, which means at least one sensor had an average temperature above 120 for three consecutive minutes. The alert will stop when the mean temperature for all sensors drops below 120. Verified Reference: [Databricks Certified Data Engineer Professional], under “SQL Analytics” section; Databricks Documentation, under “Alerts” section.
Question #5 Verified Q&A
A junior developer complains that the code in their notebook isn't producing the correct results in the development environment. A shared screenshot reveals that while they're using a notebook versioned with Databricks Repos, they're using a personal branch that contains old logic. The desired branch named dev-2.3.9 is not available from the branch selection dropdown.<br />
<br />
Which approach will allow this developer to review the current logic for this notebook?
A Use Repos to merge the current branch and the dev-2.3.9 branch, then make a pull request to sync with the remote repository
B Use Repos to pull changes from the remote Git repository and select the dev-2.3.9 branch.
C Use Repos to make a pull request use the Databricks REST API to update the current branch to dev-2.3.9
D Use Repos to checkout the dev-2.3.9 branch and auto-resolve conflicts with the current branch
E Merge all changes back to the main branch in the remote Git repository and clone the repo again
Correct Answer: Use Repos to pull changes from the remote Git repository and select the dev-2.3.9 branch.
Explanation:
This is the correct answer because it will allow the developer to update their local repository with the latest changes from the remote repository and switch to the desired branch. Pulling changes will not affect the current branch or create any conflicts, as it will only fetch the changes and not merge them. Selecting the dev-2.3.9 branch from the dropdown will checkout that branch and display its contents in the notebook. Verified Reference: [Databricks Certified Data Engineer Professional], under “Databricks Tooling” section; Databricks Documentation, under “Pull changes from a remote repository” section.

Want to practice all 215 questions?

Practice under real exam conditions with instant grading, timed simulations, and community insights.

Start Full CKS Practice Test

Frequently Asked Questions

Common questions about the Linux Foundation CKS certification practice test

How many questions are in the Linux Foundation CKS practice exam on ExamsQA?
Our CKS (Linux Foundation Certified Kubernetes Security Specialist) practice question bank currently includes 215 verified questions with comprehensive explanations.
Are the CKS exam practice questions up to date for 2026?
Yes, all Linux Foundation CKS practice questions are regularly updated and verified against current exam objectives.
Will the CKS practice questions help me pass on my first attempt?
The CKS (Linux Foundation Certified Kubernetes Security Specialist) question bank is built to mirror the real exam's format and topics, with detailed explanations for every answer so you understand the reasoning — not just memorize responses.
Is there a free demo available for CKS Linux Foundation Certified Kubernetes Security Specialist?
Yes, ExamsQA offers free demo questions for the CKS exam so you can test the interface and question quality before purchasing full access.