Free Linux Foundation Kyverno-Certified-Associate Exam Questions

Become Linux Foundation Certified with updated Kyverno-Certified-Associate exam questions and correct answers

Page: 1 / 60

Total 299 Questions | Updated On: Oct 29, 2025

Add To Cart

Question 1

What precaution should be taken to ensure the availability of dynamic admission controllers in Kubernetes?

A : Allowing webhooks to include the controller's own namespace

B : Configuring multiple replicas of the controller

C : Deploying the controller in the default namespace

D : Setting resource limits to minimal values

Answer: B

Question 2

Under which condition does Kyverno skip the auto-generation of Pod controller rules?

A : When the policy rule includes operations like DELETE.

B : When the 'pod-policies.kyverno.io/autogen-controllers' annotation includes all Pod controllers.

C : When the policy rule's match or exclude blocks specify 'names', 'selector', or 'annotations'.

D : When the policy rule matches only Pods.

Answer: C

Question 3

What is the default failure mode for Kyverno's admission webhooks, and what is its implication for cluster operability?

A : Fail-open; the cluster remains operable even if Kyverno is unavailable.

B : Retry until successful; the cluster continuously attempts to restore operability.

C : Ignore failures; the cluster operates without enforcing policies if Kyverno fails.

D : Fail-closed; the cluster may become inoperable if Kyverno is unavailable.

Answer: D

Question 4

If you discover a potential security vulnerability in Kyverno, which method should you use to report it to the Kyverno security team?

A : Send an email to kyverno-security@googlegroups.com with detailed information.

B : Open a public issue on the Kyverno GitHub repository.

C : Post a message on Kyverno's Slack channel.

D : Submit a form on the Cloud Native Computing Foundation website.

Answer: A

Question 5

What is the consequence of disabling Kyverno's dynamic webhook management by setting the flag --autoUpdateWebhooks=false?

A : The Kubernetes API server will send AdmissionReview requests for all resources to Kyverno.

B : Kyverno will no longer process any admission requests.

C : Webhooks will only process excluded namespaces.

D : Resource mutations will cease to function.

Answer: A

Page: 1 / 60

Total 299 Questions | Updated On: Oct 29, 2025

Add To Cart