Free Linux Foundation Kyverno-Certified-Associate Exam Questions

Question 1

When mutating existing resources in Kyverno, what is a crucial consideration regarding the mutation process?

A : It is an asynchronous process that may experience delays.

B : It requires no additional permissions beyond the default Kyverno setup.

C : It can only mutate resources during creation, not after.

D : It is a synchronous process that occurs instantaneously.

Answer: A

Question 2

A Kubernetes administrator creates a Kyverno ClusterPolicy with the following configuration: - failureAction is set to Audit by default. - failureActionOverrides is defined to enforce policies in the 'production' namespace and audit in the 'development' namespace. What will be the failure action in a namespace named 'staging'?

A : Default to failureAction field

B : Enforce

C : Allow

D : Audit

Answer: A

Question 3

Which Kubernetes resources are explicitly exempted from being processed by dynamic admission controllers?

A : MutatingWebhookConfigurations and ValidatingWebhookConfigurations

B : Namespaces

C : Custom Resource Definitions (CRDs)

D : Pods and Services

Answer: A

Question 4

What is the role of CEL (Common Expression Language) expressions in Kyverno policies?

A : They specify the resource types to which the policy applies.

B : They provide a way to write conditional validation logic for resource specifications.

C : They define mutation rules for Kubernetes resources.

D : They handle the generation of new resources based on existing ones.

Answer: B

Question 5

A Kubernetes administrator creates a Kyverno ClusterPolicy with the following configuration: - failureAction is set to Audit by default. - failureActionOverrides is defined to enforce policies in the 'production' namespace and audit in the 'development' namespace. What will be the failure action in a namespace named 'staging'?

A : Default to failureAction field

B : Enforce

C : Allow

D : Audit

Answer: A