Free Linux Foundation Kyverno-Certified-Associate Exam Questions

Become Linux Foundation Certified with updated Kyverno-Certified-Associate exam questions and correct answers

Page: 1 / 60

Total 299 Questions | Updated On: Sep 10, 2025

Add To Cart

Question 1

A Kubernetes administrator creates a Kyverno ClusterPolicy with the following configuration: - failureAction is set to Audit by default. - failureActionOverrides is defined to enforce policies in the 'production' namespace and audit in the 'development' namespace. What will be the failure action in a namespace named 'staging'?

A : Default to failureAction field

B : Enforce

C : Allow

D : Audit

Answer: A

Question 2

Under which condition does Kyverno skip the auto-generation of Pod controller rules?

A : When the policy rule includes operations like DELETE.

B : When the 'pod-policies.kyverno.io/autogen-controllers' annotation includes all Pod controllers.

C : When the policy rule's match or exclude blocks specify 'names', 'selector', or 'annotations'.

D : When the policy rule matches only Pods.

Answer: C

Question 3

Which Kubernetes operation is exempted from image size validation in the 'block-large-images' Kyverno policy?

A : UPDATE

B : DELETE

C : CREATE

D : RESTART

Answer: B

Question 4

In a Kyverno policy, how can you uniquely identify the 'NetworkPolicy' resource from the 'antrea.io' API group and version 'v1alpha1' to avoid naming conflicts?

A : io.antrea/v1alpha1/NetworkPolicy

B : v1alpha1/antrea.io/NetworkPolicy

C : antrea.io/v1alpha1/NetworkPolicy

D : NetworkPolicy.antrea.io/v1alpha1

Answer: C

Question 5

Which of the following is a Role created by Kyverno in its namespace?

A : kyverno:security-controller

B : kyverno:storage-controller

C : kyverno:admission-controller

D : kyverno:network-controller

Answer: C

Page: 1 / 60

Total 299 Questions | Updated On: Sep 10, 2025

Add To Cart