Study. uk . com
  1. Home
  2. All questions
  3. Question 89

CKA study material · question 89 of 1000

An administrator supplies ca.crt but deliberately withholds ca.key. What does kubeadm do?

  1. It activates External CA mode and proceeds without the key on disk
  2. It fails the preflight checks
  3. It falls back to self-signed component certificates
  4. It generates a replacement CA key
Show the answer

Answer: A. It activates External CA mode and proceeds without the key on disk

Providing only the CA certificate puts kubeadm into External CA mode, where signing happens elsewhere.

Source: Certificate Management with kubeadm (Kubernetes) — External CA mode

Challenge yourself on this topic → Study as cards