diff --git a/exam1-grade.sh b/exam1-grade.sh
new file mode 100755
index 0000000..314a818
--- /dev/null
+++ b/exam1-grade.sh
@@ -0,0 +1,87 @@
+#!/bin/bash
+# exit if not root
+clear
+# evaluating tasks
+echo -e "\033[1mchecking task 1 results\033[0m"
+source labs/exam1-task1.sh
+echo the score is $SCORE
+TOTALSCORE=$SCORE
+TOTALTOTAL=$TOTAL
+
+echo -e "\033[1mchecking task 2 results\033[0m"
+source labs/exam1-task2.sh
+echo the score is $SCORE
+TOTALSCORE=$(( TOTAL + SCORE ))
+TOTALTOTAL=$TOTAL
+
+echo -e "\033[1mchecking task 3 results\033[0m"
+source labs/exam1-task3.sh
+echo the score is $SCORE
+TOTALSCORE=$(( TOTAL + SCORE ))
+TOTALTOTAL=$TOTAL
+
+echo -e "\033[1mchecking task 4 results\033[0m"
+source labs/exam1-task4.sh
+echo the score is $SCORE
+TOTALSCORE=$(( TOTAL + SCORE ))
+TOTALTOTAL=$TOTAL
+
+echo -e "\033[1mchecking task 5 results\033[0m"
+source labs/exam1-task5.sh
+echo the score is $SCORE
+TOTALSCORE=$(( TOTAL + SCORE ))
+TOTALTOTAL=$TOTAL
+
+echo -e "\033[1mchecking task 6 results\033[0m"
+source labs/exam1-task6.sh
+echo the score is $SCORE
+TOTALSCORE=$(( TOTAL + SCORE ))
+TOTALTOTAL=$TOTAL
+
+echo -e "\033[1mchecking task 7 results\033[0m"
+source labs/exam1-task7.sh
+echo the score is $SCORE
+TOTALSCORE=$(( TOTAL + SCORE ))
+TOTALTOTAL=$TOTAL
+
+echo -e "\033[1mchecking task 8 results\033[0m"
+source labs/exam1-task8.sh
+echo the score is $SCORE
+TOTALSCORE=$(( TOTAL + SCORE ))
+TOTALTOTAL=$TOTAL
+
+echo -e "\033[1mchecking task 9 results\033[0m"
+source labs/exam1-task9.sh
+echo the score is $SCORE
+TOTALSCORE=$(( TOTAL + SCORE ))
+TOTALTOTAL=$TOTAL
+
+echo -e "\033[1mchecking task 10 results\033[0m"
+source labs/exam1-task10.sh
+echo the score is $SCORE
+TOTALSCORE=$(( TOTAL + SCORE ))
+TOTALTOTAL=$TOTAL
+
+echo -e "\033[1mchecking task 11 results\033[0m"
+source labs/exam1-task11.sh
+echo the score is $SCORE
+TOTALSCORE=$(( TOTAL + SCORE ))
+TOTALTOTAL=$TOTAL
+
+echo -e "\033[1mchecking task 12 results\033[0m"
+source labs/exam1-task12.sh
+echo the score is $SCORE
+TOTALSCORE=$(( TOTAL + SCORE ))
+TOTALTOTAL=$TOTAL
+#### print PASS/FAIL
+echo -e "\n"
+echo your score is $SCORE out of a total of $TOTAL
+
+if [[ $SCORE -ge $(( TOTAL / 10 * 7 )) ]]
+then
+        echo -e "\033[32mCONGRATULATIONS!!\033[0m\t\t You passed this sample exam!"
+	echo -e "\033[1mResults obtained here don't guarantee anything for the real exam\033[0m"
+else
+        echo -e "\033[31m[FAIL]\033[0m\t\t You did NOT pass this sample exam \033[36m:-(\033[0m"
+fi
+
diff --git a/labs/exam1-task1.sh b/labs/exam1-task1.sh
new file mode 100644
index 0000000..27e6a40
--- /dev/null
+++ b/labs/exam1-task1.sh
@@ -0,0 +1,20 @@
+echo evaluating task 1
+
+if [[ $(echo $(kubectl get nodes | grep control | wc -l)) == 3 ]] &>/dev/null
+then
+        echo -e "\033[32m[OK]\033[0m\t\t 3 control nodes were found"
+        SCORE=$(( SCORE + 10 ))
+else
+        echo -e "\033[31m[FAIL]\033[0m\t\t 3 control nodes were not found"
+fi
+TOTAL=$(( TOTAL + 10 ))
+
+if [[ $(echo $(kubectl get nodes | grep Ready | wc -l)) == 5 ]] &>/dev/null
+then
+        echo -e "\033[32m[OK]\033[0m\t\t a total of 5 nodes was found"
+        SCORE=$(( SCORE + 10 ))
+else
+        echo -e "\033[31m[FAIL]\033[0m\t\t couldn't find a total of 5 nodes"
+fi
+TOTAL=$(( TOTAL + 10 ))
+
diff --git a/labs/exam1-task10.sh b/labs/exam1-task10.sh
new file mode 100644
index 0000000..893aa97
--- /dev/null
+++ b/labs/exam1-task10.sh
@@ -0,0 +1,17 @@
+if test -x $(which helm) &>/dev/null
+then    
+        echo -e "\033[32m[OK]\033[0m\t\t the helm binary has been installed"
+        SCORE=$(( SCORE + 10 ))
+else    
+        echo -e "\033[31m[FAIL]\033[0m\t\t the helm binary has not been installed"
+fi
+TOTAL=$(( TOTAL + 10 ))
+
+if helm list | grep mysql &>/dev/null
+then
+	echo -e "\033[32m[OK]\033[0m\t\t you have successfully installed the bitnami mysql chart"
+	SCORE=$(( SCORE + 10 ))
+else
+	echo -e "\033[31m[FAIL]\033[0m\t\t bitnami mysql chart not found"
+fi
+TOTAL=$(( TOTAL + 10 ))
diff --git a/labs/exam1-task11.sh b/labs/exam1-task11.sh
new file mode 100644
index 0000000..f9d3cee
--- /dev/null
+++ b/labs/exam1-task11.sh
@@ -0,0 +1,29 @@
+# check for the role
+if kubectl -n access get roles role1511 -o yaml | grep create &>/dev/null && kubectl -n access get roles role1511 -o yaml | grep deploy &>/dev/null && kubectl -n access get roles role1511 -o yaml | grep daemonset &>/dev/null && kubectl -n access get roles role1511 -o yaml | grep stateful &>/dev/null
+then
+	echo -e "\033[32m[OK]\033[0m\t\t role role1511 was found with correct verbs and objects"
+	SCORE=$(( SCORE + 10 ))
+else
+	echo -e "\033[31m[FAIL]\033[0m\t\t no correct role configuration was found"
+fi
+TOTAL=$(( TOTAL + 10 ))
+
+# check for the rolebinding to be set correctly
+if kubectl get -n access rolebinding -o yaml | grep lab1511role &>/dev/null && kubectl get -n access rolebinding -o yaml | grep lab1511access &>/dev/null
+then
+	echo -e "\033[32m[OK]\033[0m\t\t rolebinding is set up the right way"
+	SCORE=$(( SCORE + 10 ))
+else
+        echo -e "\033[31m[FAIL]\033[0m\t\t no correctly configured rolebinding was found"
+fi
+TOTAL=$(( TOTAL + 10 ))
+
+# check for pod that uses the ServiceAccount
+if kubectl get -n access pod lab1511pod -o yaml | grep 'serviceAccount: lab1511access' &>/dev/null
+then
+        echo -e "\033[32m[OK]\033[0m\t\t the pod lab1511pod uses the serviceAccount lab1511access"
+        SCORE=$(( SCORE + 10 ))
+else
+        echo -e "\033[31m[FAIL]\033[0m\t\t the pod lab1511pod doesn't use the serviceAccount lab1511access"
+fi
+TOTAL=$(( TOTAL + 10 ))
diff --git a/labs/exam1-task12.sh b/labs/exam1-task12.sh
new file mode 100644
index 0000000..9fa691b
--- /dev/null
+++ b/labs/exam1-task12.sh
@@ -0,0 +1,40 @@
+# temporary cordon on worker1
+kubectl cordon worker1 &>/dev/null
+
+# verifying that the toleration works
+if  kubectl run lab1512testpod1 --image=nginx --restart=Never --overrides='{
+  "spec": {
+    "tolerations": [
+      {
+        "key": "type",
+        "operator": "Equal",
+        "value": "db",
+        "effect": "NoSchedule"
+      }
+    ]
+  }
+}' &>/dev/null && sleep 5
+then
+	echo -e "\033[32m[OK]\033[0m\t\t a pod with the toleration type=db will run on worker2"
+	SCORE=$(( SCORE + 10 ))
+else
+	echo -e "\033[31m[FAIL]\033[0m\t\t the toleration type=db doesn't allow the pod to run on worker2"
+fi
+TOTAL=$(( TOTAL + 10 ))
+
+# verifying that a pod without toleration doesn't run
+kubectl run lab1512testpod2 --image=nginx &>/dev/null
+
+if kubectl get pods lab1512testpod2 | grep Pending &>/dev/null
+then
+	echo -e "\033[32m[OK]\033[0m\t\t without a toleration the testpod doesn't shows a state of Pending and that exactly what we needed!"
+	SCORE=$(( SCORE + 10 ))
+else
+        echo -e "\033[31m[FAIL]\033[0m\t\t the testpod without toleration works, so the taint isn't functional"
+fi
+TOTAL=$(( TOTAL + 10 ))
+
+# cleaning up
+kubectl delete pod lab1512testpod1 lab1512testpod2 &>/dev/null
+kubectl uncordon worker1 &>/dev/null
+
diff --git a/labs/exam1-task13.sh b/labs/exam1-task13.sh
new file mode 100644
index 0000000..c6437d2
--- /dev/null
+++ b/labs/exam1-task13.sh
@@ -0,0 +1,17 @@
+if kubectl get pods -o yaml securepod | grep 'runAsGroup: 2000' &>/dev/null
+then
+	echo -e "\033[32m[OK]\033[0m\t\t securepod is running with group ID 2000"
+	SCORE=$(( SCORE + 10 ))
+else
+	echo -e "\033[31m[FAIL]\033[0m\t\t securepod is not running with group ID 2000"
+fi
+TOTAL=$(( TOTAL + 10 ))
+
+if kubectl get pods -o yaml securepod | grep 'allowPrivilegeEscalation: false' &>/dev/null
+then
+	echo -e "\033[32m[OK]\033[0m\t\t container in pod securepod has privilege escalation disabled"
+	SCORE=$(( SCORE + 10 ))
+else
+        echo -e "\033[31m[FAIL]\033[0m\t\t container in pod securepod has privilege escalation not disabled"
+fi
+TOTAL=$(( TOTAL + 10 ))
diff --git a/labs/exam1-task14.sh b/labs/exam1-task14.sh
new file mode 100644
index 0000000..31ede65
--- /dev/null
+++ b/labs/exam1-task14.sh
@@ -0,0 +1,18 @@
+if docker images | grep myapp | grep '1.0' &>/dev/null
+then
+	echo -e "\033[32m[OK]\033[0m\t\t container image myapp:1.0 was found"
+	SCORE=$(( SCORE + 10 ))
+else
+	echo -e "\033[31m[FAIL]\033[0m\t\t container image myapp:1.0 was not found"
+fi
+TOTAL=$(( TOTAL + 10 ))
+
+if [ -f /tmp/myapp.tar ]
+then
+        echo -e "\033[32m[OK]\033[0m\t\t tar archive /tmp/myapp.tar was found"
+        SCORE=$(( SCORE + 10 ))
+else
+        echo -e "\033[31m[FAIL]\033[0m\t\t tar archive /tmp/myapp.tar was not found"
+fi
+TOTAL=$(( TOTAL + 10 ))
+
diff --git a/labs/exam1-task15.sh b/labs/exam1-task15.sh
new file mode 100644
index 0000000..b558487
--- /dev/null
+++ b/labs/exam1-task15.sh
@@ -0,0 +1,8 @@
+if kubectl get pod securepod -n oklahoma -o yaml | grep 'serviceAccount: secure' &>/dev/null
+then
+	echo -e "\033[32m[OK]\033[0m\t\t pod securepod in namespace oklahoma found and it is using the serviceaccount secure"
+	SCORE=$(( SCORE + 10 ))
+else
+	echo -e "\033[31m[FAIL]\033[0m\t\t couldn't find the pod securepod in namespace oklahoma that uses the serviceaccount secure"
+fi
+TOTAL=$(( TOTAL + 10 ))
diff --git a/labs/exam1-task2.sh b/labs/exam1-task2.sh
new file mode 100644
index 0000000..6b6a3bb
--- /dev/null
+++ b/labs/exam1-task2.sh
@@ -0,0 +1,18 @@
+if kubectl get pods lab153pod | grep '2/2' &>/dev/null
+then
+	echo -e "\033[32m[OK]\033[0m\t\t the pod lab153pod was found and it is running 2 containers"
+	SCORE=$(( SCORE + 10 ))
+else
+	echo -e "\033[31m[FAIL]\033[0m\t\t cannot find the pod lab153pod running 2 containers"
+fi
+TOTAL=$(( TOTAL + 10 ))
+
+if kubectl get pods lab153pod -o yaml | grep -i toleration -A3 | grep -iz noschedule.*control-plane &>/dev/null
+then
+	echo -e "\033[32m[OK]\033[0m\t\t the pod lab153pod has a tolerations that allows it to run on control-plane nodes"
+	SCORE=$(( SCORE + 10 ))
+else
+	echo -e "\033[31m[FAIL]\033[0m\t\t the pod lab153pod does not have a toleration that allows it to run on a control-plane node"
+fi
+TOTAL=$(( TOTAL + 10 ))
+
diff --git a/labs/exam1-task3.sh b/labs/exam1-task3.sh
new file mode 100644
index 0000000..d7e103b
--- /dev/null
+++ b/labs/exam1-task3.sh
@@ -0,0 +1,9 @@
+export LAB3POD=$(kubectl get pods | awk '/lab154/ { print $1 }') &>/dev/null
+if kubectl get pods $LAB3POD -o yaml | grep initContainer &>/dev/null
+then
+	echo -e "\033[32m[OK]\033[0m\t\t $LAB3POD is running and it does have an init container"
+	SCORE=$(( SCORE + 10 ))
+else
+	echo -e "\033[31m[FAIL]\033[0m\t\t cannot find $LAB3POD using an initcontainer"
+fi
+TOTAL=$(( TOTAL + 10 ))
diff --git a/labs/exam1-task4.sh b/labs/exam1-task4.sh
new file mode 100644
index 0000000..9c59f92
--- /dev/null
+++ b/labs/exam1-task4.sh
@@ -0,0 +1,8 @@
+if kubectl get pv lab155 -o yaml | grep 'path.*/lab155' &>/dev/null
+then
+	echo -e "\033[32m[OK]\033[0m\t\t a PersistentVolume with the name lab155 was found and it uses the right path"
+	SCORE=$(( SCORE + 10 ))
+else
+	echo -e "\033[31m[FAIL]\033[0m\t\t PersistentVolume with the name lab155 using the right path was not found"
+fi
+TOTAL=$(( TOTAL + 10 ))
diff --git a/labs/exam1-task5.sh b/labs/exam1-task5.sh
new file mode 100644
index 0000000..7fb3fbe
--- /dev/null
+++ b/labs/exam1-task5.sh
@@ -0,0 +1,17 @@
+if kubectl get svc | grep 32567 | grep lab156deploy &>/dev/null
+then
+	echo -e "\033[32m[OK]\033[0m\t\t a NodePort Service exposing lab156deploy was found listening at port 32567"
+	SCORE=$(( SCORE + 7 ))
+else
+	echo -e "\033[31m[FAIL]\033[0m\t\t no NodePort Service listening at port 32567 was found"
+fi
+TOTAL=$(( TOTAL + 7 ))
+
+if kubectl get endpoints | grep lab156deploy | grep -E '^[^:]*(:[^:]*){3}$' &>/dev/null
+then
+	echo -e "\033[32m[OK]\033[0m\t\t the NodePort Service is exposing 3 Pods"
+	SCORE=$(( SCORE + 3 ))
+else
+	echo -e "\033[31m[FAIL]\033[0m\t\t the NodePort Service is not exposing 3 Pods"
+fi
+TOTAL=$(( TOTAL + 3 ))
diff --git a/labs/exam1-task6.sh b/labs/exam1-task6.sh
new file mode 100644
index 0000000..0bf21e1
--- /dev/null
+++ b/labs/exam1-task6.sh
@@ -0,0 +1,60 @@
+echo -e "\033[35mhang on...\033[0m\t\t this task evaluation needs about a minute to complete"
+
+
+##preparing test Pod without a label whihch should not get access
+kubectl delete pod labgrade -n access &>/dev/null
+sleep 5
+kubectl run labgrade -n access --image=busybox -- sleep 3600 &>/dev/null
+sleep 5
+
+if kubectl exec -n access labgrade -- wget --spider --timeout=1 lab157web.restricted.svc.cluster.local &>/dev/null
+then
+	echo -e "\033[31m[FAIL]\033[0m\t\t testpod is getting access, which means the networkpolicy is not correct"
+else
+	echo -e "\033[32m[OK]\033[0m\t\t testpod is not getting access, good!"
+	SCORE=$(( SCORE + 10 ))
+fi
+TOTAL=$(( TOTAL + 10 ))
+
+###testing if a networkpolicy was found
+#do we have a networkpolicy on the namespace restricted?
+if kubectl get netpol -n restricted &>/dev/null
+then
+        echo -e "\033[32m[OK]\033[0m\t\t found a NetworkPolicy on the Namespace restricted"
+        SCORE=$(( SCORE + 4 ))
+else
+        echo -e "\033[31m[FAIL]\033[0m\t\t previous revision of deploy updated not found or not using nginx:latest"
+fi
+TOTAL=$(( TOTAL + 4 ))
+
+#do we have a namespaceselector that allows incoming traffic from ns access
+if kubectl get netpol -n restricted -o yaml | grep -A3 namespaceSelector | grep 'kubernetes.io/metadata.name: access' &>/dev/null
+then
+        echo -e "\033[32m[OK]\033[0m\t\t namespaceSelector is set correctly in the NetworkPolicy"
+        SCORE=$(( SCORE + 8 ))
+else
+        echo -e "\033[31m[FAIL]\033[0m\t\t namespaceSelector is not set correctly in the NetworkPolicy"
+fi
+TOTAL=$(( TOTAL + 8 ))
+
+#do we have a podselector that allows incoming traffic from pods that have label access=true
+if kubectl get netpol -n restricted -o yaml | grep -A3 podSelector | grep 'access: "true"' &>/dev/null
+then
+        echo -e "\033[32m[OK]\033[0m\t\t podSelector is set correctly in the NetworkPolicy"
+        SCORE=$(( SCORE + 8 ))
+else
+        echo -e "\033[31m[FAIL]\033[0m\t\t podSelector is not set correctly in the NetworkPolicy"
+fi
+TOTAL=$(( TOTAL + 8 ))
+
+##setting the label so that the testpod is getting access
+kubectl label -n access pod labgrade access="true"
+
+if kubectl exec -n access labgrade -- wget --spider --timeout=1 lab157web.restricted.svc.cluster.local &>/dev/null
+then
+        echo -e "\033[32m[OK]\033[0m\t\t previous revision of deploy updated was using nginx:latest"
+        SCORE=$(( SCORE + 10 ))
+else
+        echo -e "\033[31m[FAIL]\033[0m\t\t previous revision of deploy updated not found or not using nginx:latest"
+fi
+TOTAL=$(( TOTAL + 10 ))
diff --git a/labs/exam1-task7.sh b/labs/exam1-task7.sh
new file mode 100644
index 0000000..08548c5
--- /dev/null
+++ b/labs/exam1-task7.sh
@@ -0,0 +1,26 @@
+if kubectl get quota -n limited | grep 'memory: .*/128M' &>/dev/null
+then
+	echo -e "\033[32m[OK]\033[0m\t\t memory quota was set up correctly"
+	SCORE=$(( SCORE + 5 ))
+else
+	echo -e "\033[31m[FAIL]\033[0m\t\t memory quota was not set up correctly"
+fi
+TOTAL=$(( TOTAL + 5 ))
+
+if kubectl get quota -n limited | grep 'pods: .*/5' &>/dev/null
+then
+        echo -e "\033[32m[OK]\033[0m\t\t Pods quota setup correctly"
+        SCORE=$(( SCORE + 5 ))
+else
+        echo -e "\033[31m[FAIL]\033[0m\t\t Pods quota no setup correctly"
+fi
+TOTAL=$(( TOTAL + 5 ))
+
+if kubectl get deploy -n limited lab158deploy -o yaml | grep -A 5 resources | grep 'memory: 32Mi' &>/dev/null
+then
+        echo -e "\033[32m[OK]\033[0m\t\t lab158deploy resource request is set to 32 Mi"
+        SCORE=$(( SCORE + 10 ))
+else
+        echo -e "\033[31m[FAIL]\033[0m\t\t lab158deploy resource request is not set to 32Mi"
+fi
+TOTAL=$(( TOTAL + 10 ))
diff --git a/labs/exam1-task8.sh b/labs/exam1-task8.sh
new file mode 100644
index 0000000..15bfae5
--- /dev/null
+++ b/labs/exam1-task8.sh
@@ -0,0 +1,9 @@
+if kubectl get pods | grep lab159pod-worker2 &>/dev/null
+then
+        echo -e "\033[32m[OK]\033[0m\t\t NetworkPolicy was found with correct configuration"
+        SCORE=$(( SCORE + 10 ))
+else
+        echo -e "\033[31m[FAIL]\033[0m\t\t No NetworkPolicy with correct configuration was found"
+fi
+TOTAL=$(( TOTAL + 10 ))
+
diff --git a/labs/exam1-task9.sh b/labs/exam1-task9.sh
new file mode 100644
index 0000000..0128dae
--- /dev/null
+++ b/labs/exam1-task9.sh
@@ -0,0 +1,6 @@
+if true &>/dev/null
+then
+        echo -e "\033[32m[OK]\033[0m\t\t this task cannot be automatically graded so you just get the points"
+        SCORE=$(( SCORE + 10 ))
+fi
+TOTAL=$(( TOTAL + 10 ))
diff --git a/labs/exam2-task1.sh b/labs/exam2-task1.sh
new file mode 100644
index 0000000..d5a9ab2
--- /dev/null
+++ b/labs/exam2-task1.sh
@@ -0,0 +1,39 @@
+if kubectl get ns indiana &>/dev/null
+then
+	echo -e "\033[32m[OK]\033[0m\t\t namespace indiana was found"
+	SCORE=$(( SCORE + 10 ))
+else
+	echo -e "\033[31m[FAIL]\033[0m\t\t namespace indiana was not found"
+fi
+TOTAL=$(( TOTAL + 10 ))
+
+if [[ $(echo $(kubectl get -n indiana secret insecret -o yaml | awk '/color/ { print $2 }')| base64 -d) == blue ]] &>/dev/null
+then
+        echo -e "\033[32m[OK]\033[0m\t\t secret insecret with COLOR=blue was found"
+        SCORE=$(( SCORE + 10 ))
+elif kubectl get -n indiana secret insecret &>/dev/null
+then
+	echo -e "\033[32m[OK]\033[0m\t\t secret insecret was found, but not with the expected variable"
+else
+        echo -e "\033[31m[FAIL]\033[0m\t\t secret insecret was not found"
+fi
+TOTAL=$(( TOTAL + 10 ))
+
+if [[ $(echo $(kubectl get pods -n indiana inpod -o jsonpath='{.spec.containers[*].image}')) == nginx:latest ]] &>/dev/null
+then
+        echo -e "\033[32m[OK]\033[0m\t\t found pod inpod that uses the latest version of nginx"
+        SCORE=$(( SCORE + 10 ))
+else
+        echo -e "\033[31m[FAIL]\033[0m\t\t pod inpod that uses the latest version of the nginx image was not found"
+fi
+TOTAL=$(( TOTAL + 10 ))
+
+
+if kubectl get pods -n indiana inpod -o yaml | grep insecret &>/dev/null
+then
+        echo -e "\033[32m[OK]\033[0m\t\t pod inpod uses the secret insecret"
+        SCORE=$(( SCORE + 10 ))
+else
+        echo -e "\033[31m[FAIL]\033[0m\t\t pod inpod doesn't use the secret insecret"
+fi
+TOTAL=$(( TOTAL + 10 ))
diff --git a/labs/exam2-task10.sh b/labs/exam2-task10.sh
new file mode 100644
index 0000000..441eeab
--- /dev/null
+++ b/labs/exam2-task10.sh
@@ -0,0 +1,8 @@
+if helm list | grep mysql &>/dev/null
+then
+	echo -e "\033[32m[OK]\033[0m\t\t you have successfully installed the bitnami mysql chart"
+	SCORE=$(( SCORE + 10 ))
+else
+	echo -e "\033[31m[FAIL]\033[0m\t\t bitnami mysql chart not found"
+fi
+TOTAL=$(( TOTAL + 10 ))
diff --git a/labs/exam2-task11.sh b/labs/exam2-task11.sh
new file mode 100644
index 0000000..e4e675f
--- /dev/null
+++ b/labs/exam2-task11.sh
@@ -0,0 +1,26 @@
+if kubectl get ns nebraska &>/dev/null &>/dev/null
+then
+	echo -e "\033[32m[OK]\033[0m\t\t namespace nebraska was found"
+	SCORE=$(( SCORE + 10 ))
+else
+	echo -e "\033[31m[FAIL]\033[0m\t\t namespace nebraska was not found"
+fi
+TOTAL=$(( TOTAL + 10 ))
+
+if kubectl -n nebraska get deploy | grep snowdeploy &>/dev/null
+then
+	echo -e "\033[32m[OK]\033[0m\t\t Deployment snowdeploy was found in Namespace nebraska"
+	SCORE=$(( SCORE + 10 ))
+else
+        echo -e "\033[31m[FAIL]\033[0m\t\t Deployment snowdeploy was not found"
+fi
+TOTAL=$(( TOTAL + 10 ))
+
+if kubectl -n nebraska get deploy snowdeploy -o yaml | grep -A1 requests | grep 64Mi &>/dev/null && kubectl -n nebraska get deploy snowdeploy -o yaml | grep -A1 limits | grep 128Mi &>/dev/null
+then
+        echo -e "\033[32m[OK]\033[0m\t\t the requested memory request and limits have been found"
+        SCORE=$(( SCORE + 10 ))
+else
+        echo -e "\033[31m[FAIL]\033[0m\t\t the requested memory request and limits have not been found"
+fi
+TOTAL=$(( TOTAL + 10 ))
diff --git a/labs/exam2-task12.sh b/labs/exam2-task12.sh
new file mode 100644
index 0000000..ce7ff9c
--- /dev/null
+++ b/labs/exam2-task12.sh
@@ -0,0 +1,27 @@
+if  kubectl get ns | grep birds &>/dev/null
+then
+	echo -e "\033[32m[OK]\033[0m\t\t namespace birds was found"
+	SCORE=$(( SCORE + 10 ))
+else
+	echo -e "\033[31m[FAIL]\033[0m\t\t namespace birds was not found"
+fi
+TOTAL=$(( TOTAL + 10 ))
+
+if [[ $(kubectl -n birds get pods --show-labels --selector=type=allbirds | grep bird | wc -l) == "5" ]] &>/dev/null
+then
+	echo -e "\033[32m[OK]\033[0m\t\t good, 5 pods with label type=allbirds were found"
+	SCORE=$(( SCORE + 10 ))
+else
+        echo -e "\033[31m[FAIL]\033[0m\t\t couldn't finf 5 pods with the label type=allbirds"
+fi
+TOTAL=$(( TOTAL + 10 ))
+
+if kubectl get -n birds svc allbirds | grep 32323 &>/dev/null
+then
+        echo -e "\033[32m[OK]\033[0m\t\t NodePort Service allbirds listening on nodePort 32323 was found in Namespace birds"
+        SCORE=$(( SCORE + 10 ))
+else
+        echo -e "\033[31m[FAIL]\033[0m\t\t no NodePort Service allbirds listening on nodePort 32323 was found in Namespace birds"
+fi
+TOTAL=$(( TOTAL + 10 ))
+
diff --git a/labs/exam2-task13.sh b/labs/exam2-task13.sh
new file mode 100644
index 0000000..c6437d2
--- /dev/null
+++ b/labs/exam2-task13.sh
@@ -0,0 +1,17 @@
+if kubectl get pods -o yaml securepod | grep 'runAsGroup: 2000' &>/dev/null
+then
+	echo -e "\033[32m[OK]\033[0m\t\t securepod is running with group ID 2000"
+	SCORE=$(( SCORE + 10 ))
+else
+	echo -e "\033[31m[FAIL]\033[0m\t\t securepod is not running with group ID 2000"
+fi
+TOTAL=$(( TOTAL + 10 ))
+
+if kubectl get pods -o yaml securepod | grep 'allowPrivilegeEscalation: false' &>/dev/null
+then
+	echo -e "\033[32m[OK]\033[0m\t\t container in pod securepod has privilege escalation disabled"
+	SCORE=$(( SCORE + 10 ))
+else
+        echo -e "\033[31m[FAIL]\033[0m\t\t container in pod securepod has privilege escalation not disabled"
+fi
+TOTAL=$(( TOTAL + 10 ))
diff --git a/labs/exam2-task14.sh b/labs/exam2-task14.sh
new file mode 100644
index 0000000..31ede65
--- /dev/null
+++ b/labs/exam2-task14.sh
@@ -0,0 +1,18 @@
+if docker images | grep myapp | grep '1.0' &>/dev/null
+then
+	echo -e "\033[32m[OK]\033[0m\t\t container image myapp:1.0 was found"
+	SCORE=$(( SCORE + 10 ))
+else
+	echo -e "\033[31m[FAIL]\033[0m\t\t container image myapp:1.0 was not found"
+fi
+TOTAL=$(( TOTAL + 10 ))
+
+if [ -f /tmp/myapp.tar ]
+then
+        echo -e "\033[32m[OK]\033[0m\t\t tar archive /tmp/myapp.tar was found"
+        SCORE=$(( SCORE + 10 ))
+else
+        echo -e "\033[31m[FAIL]\033[0m\t\t tar archive /tmp/myapp.tar was not found"
+fi
+TOTAL=$(( TOTAL + 10 ))
+
diff --git a/labs/exam2-task15.sh b/labs/exam2-task15.sh
new file mode 100644
index 0000000..b558487
--- /dev/null
+++ b/labs/exam2-task15.sh
@@ -0,0 +1,8 @@
+if kubectl get pod securepod -n oklahoma -o yaml | grep 'serviceAccount: secure' &>/dev/null
+then
+	echo -e "\033[32m[OK]\033[0m\t\t pod securepod in namespace oklahoma found and it is using the serviceaccount secure"
+	SCORE=$(( SCORE + 10 ))
+else
+	echo -e "\033[31m[FAIL]\033[0m\t\t couldn't find the pod securepod in namespace oklahoma that uses the serviceaccount secure"
+fi
+TOTAL=$(( TOTAL + 10 ))
diff --git a/labs/exam2-task2.sh b/labs/exam2-task2.sh
new file mode 100644
index 0000000..ad1fbd7
--- /dev/null
+++ b/labs/exam2-task2.sh
@@ -0,0 +1,11 @@
+kubectl get pods -A --selector tier=control-plane | awk 'NR > 1 { print $2 }' > /tmp/task2file.txt
+
+if diff /tmp/task2file.txt /tmp/task2pods
+then
+	echo -e "\033[32m[OK]\033[0m\t\t all pods with label tier=control-plane were found"
+	SCORE=$(( SCORE + 10 ))
+else
+	echo -e "\033[31m[FAIL]\033[0m\t\t your result file doesn't show all pods with the label tier=control-plane"
+fi
+TOTAL=$(( TOTAL + 10 ))
+
diff --git a/labs/exam2-task3.sh b/labs/exam2-task3.sh
new file mode 100644
index 0000000..84390d0
--- /dev/null
+++ b/labs/exam2-task3.sh
@@ -0,0 +1,17 @@
+if kubectl get cm task3cm -o yaml |grep index.html &>/dev/null
+then
+	echo -e "\033[32m[OK]\033[0m\t\t a configmap with the name task3cm was found with the right contents"
+	SCORE=$(( SCORE + 10 ))
+else
+	echo -e "\033[31m[FAIL]\033[0m\t\t configmap with the name task3cm was not found"
+fi
+TOTAL=$(( TOTAL + 10 ))
+
+if kubectl describe pod oregonpod | grep -A1 'ConfigMap' | grep task3cm &>/dev/null
+then
+	echo -e "\033[32m[OK]\033[0m\t\t the pod oregonpod has the configmap task3cm mounted"
+	SCORE=$(( SCORE + 10 ))
+else
+        echo -e "\033[31m[FAIL]\033[0m\t\t the pod oregonpod doesn't seem to have the configmap task3cm mounted"
+fi
+TOTAL=$(( TOTAL + 10 ))
diff --git a/labs/exam2-task4.sh b/labs/exam2-task4.sh
new file mode 100644
index 0000000..d01cf3b
--- /dev/null
+++ b/labs/exam2-task4.sh
@@ -0,0 +1,8 @@
+if kubectl get pods sidepod -o yaml | grep -A 10  initContainers | grep 'restartPolicy: Always' &>/dev/null
+then
+	echo -e "\033[32m[OK]\033[0m\t\t found a pod sidepod that runs a sidecar container"
+	SCORE=$(( SCORE + 10 ))
+else
+	echo -e "\033[31m[FAIL]\033[0m\t\t didn't find a pod sidepod that runs a sidecar container"
+fi
+TOTAL=$(( TOTAL + 10 ))
diff --git a/labs/exam2-task5.sh b/labs/exam2-task5.sh
new file mode 100644
index 0000000..875934c
--- /dev/null
+++ b/labs/exam2-task5.sh
@@ -0,0 +1,17 @@
+if kubectl get ns probes &>/dev/null
+then
+	echo -e "\033[32m[OK]\033[0m\t\t namespace probes was found"
+	SCORE=$(( SCORE + 10 ))
+else
+	echo -e "\033[31m[FAIL]\033[0m\t\t namespace probes was not found"
+fi
+TOTAL=$(( TOTAL + 10 ))
+
+if kubectl describe pods -n probes probepod | grep Liveness | grep '/healthz' &>/dev/null
+then
+        echo -e "\033[32m[OK]\033[0m\t\t pod probepod was found, as well as its Liveness probe"
+        SCORE=$(( SCORE + 10 ))
+else
+        echo -e "\033[31m[FAIL]\033[0m\t\t no pod probepod with correct liveness probe was found"
+fi
+TOTAL=$(( TOTAL + 10 ))
diff --git a/labs/exam2-task6.sh b/labs/exam2-task6.sh
new file mode 100644
index 0000000..47aa593
--- /dev/null
+++ b/labs/exam2-task6.sh
@@ -0,0 +1,22 @@
+# get the revision number of the last update that was found
+kubectl rollout history deployment updates > /tmp/task6.txt
+LAST=$(tail -2 /tmp/task6.txt | head -1 | awk '{ print $1 }')
+BEFORE=$(( LAST -1 ))
+
+if kubectl rollout history deployment updates --revision=${LAST} | grep 'nginx:1.17' &>/dev/null
+then
+	echo -e "\033[32m[OK]\033[0m\t\t last revision of the updated deploy is set to nginx:1.17"
+	SCORE=$(( SCORE + 10 ))
+else
+	echo -e "\033[31m[FAIL]\033[0m\t\t last revision of the updated deploy is not set to nginx:1.17"
+fi
+TOTAL=$(( TOTAL + 10 ))
+
+if kubectl rollout history deployment updates --revision=${BEFORE} | grep 'nginx:latest' &>/dev/null
+then
+        echo -e "\033[32m[OK]\033[0m\t\t previous revision of deploy updated was using nginx:latest"
+        SCORE=$(( SCORE + 10 ))
+else
+        echo -e "\033[31m[FAIL]\033[0m\t\t previous revision of deploy updated not found or not using nginx:latest"
+fi
+TOTAL=$(( TOTAL + 10 ))
diff --git a/labs/exam2-task7.sh b/labs/exam2-task7.sh
new file mode 100644
index 0000000..53b05ac
--- /dev/null
+++ b/labs/exam2-task7.sh
@@ -0,0 +1,36 @@
+if grep $(minikube ip).*myapp.info /etc/hosts &>/dev/null
+then
+	echo -e "\033[32m[OK]\033[0m\t\t name resolution for myapp.info is setup"
+	SCORE=$(( SCORE + 10 ))
+else
+	echo -e "\033[31m[FAIL]\033[0m\t\t no name resolution for myapp.info was found"
+fi
+TOTAL=$(( TOTAL + 10 ))
+
+if kubectl describe svc task7svc | grep app=updates &>/dev/null
+then
+        echo -e "\033[32m[OK]\033[0m\t\t Service task7svc found and exposes Deploy updates"
+        SCORE=$(( SCORE + 10 ))
+else
+        echo -e "\033[31m[FAIL]\033[0m\t\t No Service task7svc exposing Deploy updates was found"
+fi
+TOTAL=$(( TOTAL + 10 ))
+
+if kubectl get pods -n ingress-nginx | grep controller | grep Running &>/dev/null
+then
+        echo -e "\033[32m[OK]\033[0m\t\t found a running ingress controller"
+        SCORE=$(( SCORE + 10 ))
+else
+        echo -e "\033[31m[FAIL]\033[0m\t\t no running ingress controller was found"
+fi
+TOTAL=$(( TOTAL + 10 ))
+
+
+if kubectl describe ing | grep task7svc:80 &>/dev/null
+then
+        echo -e "\033[32m[OK]\033[0m\t\t ingress rule forwarding traffic to task7svc was found"
+        SCORE=$(( SCORE + 10 ))
+else
+        echo -e "\033[31m[FAIL]\033[0m\t\" no ingress rule forwarding traffic to task7svc was found"
+fi
+TOTAL=$(( TOTAL + 10 ))
diff --git a/labs/exam2-task8.sh b/labs/exam2-task8.sh
new file mode 100644
index 0000000..6e9469d
--- /dev/null
+++ b/labs/exam2-task8.sh
@@ -0,0 +1,17 @@
+if kubectl describe networkpolicy | grep 'PodSelector:.*type=webapp' &>/dev/null && kubectl describe networkpolicy | grep 'PodSelector:.*type=tester' &>/dev/null
+then
+        echo -e "\033[32m[OK]\033[0m\t\t NetworkPolicy was found with correct configuration"
+        SCORE=$(( SCORE + 10 ))
+else
+        echo -e "\033[31m[FAIL]\033[0m\t\t No NetworkPolicy with correct configuration was found"
+fi
+TOTAL=$(( TOTAL + 10 ))
+
+if kubectl exec -it nevatest -- wget --spider --timeout=1 nevaginx &>/dev/null
+then
+        echo -e "\033[32m[OK]\033[0m\t\t the tester pod can access the nevaginx pod"
+        SCORE=$(( SCORE + 10 ))
+else
+        echo -e "\033[31m[FAIL]\033[0m\t\t the tester pod cannot access the nevaginx pod"
+fi
+TOTAL=$(( TOTAL + 10 ))
diff --git a/labs/exam2-task9.sh b/labs/exam2-task9.sh
new file mode 100644
index 0000000..22c2b35
--- /dev/null
+++ b/labs/exam2-task9.sh
@@ -0,0 +1,17 @@
+if kubectl exec storepod -- cat /usr/share/nginx/html/index.html &>/dev/null
+then
+        echo -e "\033[32m[OK]\033[0m\t\t file index.html accessible through hostPath storage" 
+        SCORE=$(( SCORE + 10 ))
+else
+        echo -e "\033[31m[FAIL]\033[0m\t\t file index.html not accessible through hostPath storage"
+fi
+TOTAL=$(( TOTAL + 10 ))
+
+if curl $(minikube ip):32032 | grep welcome &>/dev/null
+then
+        echo -e "\033[32m[OK]\033[0m\t\t Pod storepod correctly exposed and hostPath volume content accessible"
+        SCORE=$(( SCORE + 10 ))
+else
+        echo -e "\033[31m[FAIL]\033[0m\t\t Pod storepod not correctly exposed"
+fi
+TOTAL=$(( TOTAL + 10 ))