EKS cluster creation in AWS - Practice Problems & Coding Challenges

Challenge - 5 Problems

❓ Architecture

intermediate

EKS Cluster Networking Setup

You want to create an EKS cluster that supports worker nodes in multiple Availability Zones for high availability. Which networking setup is required?

A Create a VPC with subnets in multiple Availability Zones but disable routing between subnets.

B Create a VPC with a single subnet in one Availability Zone and assign private IPs only.

C Create a VPC with subnets in multiple Availability Zones and enable public IP assignment for worker nodes.

D Create a VPC with subnets in multiple Availability Zones but only use one subnet for worker nodes.

💡 Hint

Think about how worker nodes communicate and how availability zones affect fault tolerance.

For high availability, worker nodes must be spread across multiple Availability Zones. This requires subnets in each zone. Public IPs allow nodes to communicate with the internet if needed.

❓ Configuration

intermediate

IAM Role for EKS Worker Nodes

Which IAM role policy is necessary for EKS worker nodes to join the cluster and communicate with the control plane?

A AmazonEKSClusterPolicy, AmazonEC2ContainerRegistryFullAccess, AmazonVPCFullAccess

B AmazonS3FullAccess, AmazonEC2FullAccess, AmazonEKSClusterPolicy

C AmazonEKSServicePolicy, AmazonEC2FullAccess, AmazonS3ReadOnlyAccess

D AmazonEKSWorkerNodePolicy, AmazonEC2ContainerRegistryReadOnly, AmazonEKS_CNI_Policy

💡 Hint

Focus on policies that allow nodes to register and pull container images.

Worker nodes need AmazonEKSWorkerNodePolicy to join the cluster, AmazonEC2ContainerRegistryReadOnly to pull images, and AmazonEKS_CNI_Policy for networking.

❓ security

advanced

EKS Cluster Endpoint Access Control

You want to restrict access to your EKS cluster API endpoint so only specific IP addresses can connect. Which configuration achieves this?

A Enable public endpoint access and configure the allowed CIDR blocks with the IP addresses.

B Enable private endpoint access only and disable public endpoint access.

C Disable both public and private endpoint access and use a VPN to connect.

D Enable public endpoint access without CIDR restrictions and rely on security groups.

💡 Hint

Consider how EKS allows IP-based filtering on the API endpoint.

Enabling public endpoint access with allowed CIDR blocks restricts API access to specified IP ranges, controlling who can connect.

❓ service_behavior

advanced

EKS Cluster Auto Scaling Behavior

When you enable the Cluster Autoscaler on your EKS cluster, what behavior should you expect when pod resource requests increase?

A The autoscaler automatically upgrades the cluster control plane to improve performance.

B The autoscaler adds new nodes to the cluster to meet pod resource demands automatically.

C The autoscaler stops scheduling new pods until resources free up.

D The autoscaler deletes existing pods to reduce resource usage.

💡 Hint

Think about how autoscaling helps with resource shortages.

The Cluster Autoscaler adds nodes when pods cannot be scheduled due to insufficient resources, ensuring workload demands are met.

✅ Best Practice

expert

EKS Cluster Logging Configuration

You want to enable detailed logging for your EKS cluster to monitor API calls, authentications, and scheduler events. Which logging configuration is correct?

A Enable all control plane logs: API server, audit, authenticator, controller manager, and scheduler logs.

B Enable only API server logs to reduce storage costs.

C Enable worker node logs only, as control plane logs are managed by AWS.

D Disable all logging to improve cluster performance.

💡 Hint

Consider which logs provide comprehensive cluster activity visibility.

Enabling all control plane logs gives full visibility into cluster operations, which is best for monitoring and troubleshooting.