Free Linux Foundation Kyverno-Certified-Associate Exam Questions

Become Linux Foundation Certified with updated Kyverno-Certified-Associate exam questions and correct answers

Page: 1 / 60

Total 299 Questions | Updated On: Dec 06, 2025

Add To Cart

Question 1

What is the consequence of disabling Kyverno's dynamic webhook management by setting the flag --autoUpdateWebhooks=false?

A : The Kubernetes API server will send AdmissionReview requests for all resources to Kyverno.

B : Kyverno will no longer process any admission requests.

C : Webhooks will only process excluded namespaces.

D : Resource mutations will cease to function.

Answer: A

Question 2

What is the role of 'validationFailureAction: Enforce' in a Kyverno policy?

A : It only logs validation failures without blocking resource creation.

B : It ignores validation failures and allows resource creation.

C : It automatically fixes validation failures to comply with the policy.

D : It blocks resource creation if validation fails.

Answer: D

Question 3

Which of the following Kubernetes operations cannot be controlled by dynamic admission controllers?

A : UPDATE

B : CREATE

C : DELETE

D : GET

Answer: D

Question 4

Under which condition does Kyverno skip the auto-generation of Pod controller rules?

A : When the policy rule includes operations like DELETE.

B : When the 'pod-policies.kyverno.io/autogen-controllers' annotation includes all Pod controllers.

C : When the policy rule's match or exclude blocks specify 'names', 'selector', or 'annotations'.

D : When the policy rule matches only Pods.

Answer: C

Question 5

In the 'verify-manifest-integrity' Kyverno ClusterPolicy, which field specifies the public key used to verify the signatures of Deployment manifests?

A : attestors.entries.keys.publicKeys

B : spec.validationFailureAction

C : ignoreFields.objects.fields

D : metadata.annotations

Answer: A

Page: 1 / 60

Total 299 Questions | Updated On: Dec 06, 2025

Add To Cart