Question 1

What is the consequence of disabling Kyverno's dynamic webhook management by setting the flag --autoUpdateWebhooks=false?

Options :

A : The Kubernetes API server will send AdmissionReview requests for all resources to Kyverno.

B : Kyverno will no longer process any admission requests.

C : Webhooks will only process excluded namespaces.

D : Resource mutations will cease to function.

Answer: A

Question 2

In a Kyverno policy, how can you uniquely identify the 'NetworkPolicy' resource from the 'antrea.io' API group and version 'v1alpha1' to avoid naming conflicts?

Options :

A : io.antrea/v1alpha1/NetworkPolicy

B : v1alpha1/antrea.io/NetworkPolicy

C : antrea.io/v1alpha1/NetworkPolicy

D : NetworkPolicy.antrea.io/v1alpha1

Answer: C

Question 3

In a Kyverno policy definition, how can you reference the 'readinessProbe.tcpSocket.port' field three levels up from the current position?

Options :

A : $(./../../../readinessProbe/tcpSocket/port)

B : <./../../../readinessProbe/tcpSocket/port>

C : {{request.object.spec.containers.readinessProbe.tcpSocket.port}}

D : ${./../../../readinessProbe/tcpSocket/port}

Answer: A

Question 4

In Kyverno, how do deny rules differ from pattern-based validation rules?

Options :

A : Deny rules are less expressive and cannot use multiple conditions, unlike pattern-based rules.

B : Deny rules block resources when conditions are met, whereas pattern-based rules allow resources when patterns match.

C : Deny rules are only applicable to network policies, while pattern-based rules can be used for any resource.

D : Deny rules allow resources if the condition is true, while pattern-based rules block them.

Answer: B

Question 5

What precaution should be taken to ensure the availability of dynamic admission controllers in Kubernetes?

Options :

A : Allowing webhooks to include the controller-s own namespace

B : Configuring multiple replicas of the controller

C : Deploying the controller in the default namespace

D : Setting resource limits to minimal values

Answer: B

Higher Test Marks with Free Online Kyverno-Certified-Associate Exam Practice

Buying Options: