Question 1

What is the purpose of defining 'cel.paramKind' and 'cel.paramRef' in a Kyverno policy?

Options :

A : To specify the Kubernetes resource types the policy applies to.

B : To define the rules for resource mutation.

C : To bind the policy to a specific namespace.

D : To associate the policy with a parameter resource that provides configurable values.

Answer: D

Question 2

In a Kyverno policy, how many child declarations can a single rule contain among Validate, Mutate, Generate, or VerifyImages?

Options :

A : One for each type, allowing multiple declarations.

B : No limit on the number of declarations.

C : Only one among Validate, Mutate, Generate, or VerifyImages.

D : Two declarations maximum.

Answer: C

Question 3

Which Kubernetes resources are explicitly exempted from being processed by dynamic admission controllers?

Options :

A : MutatingWebhookConfigurations and ValidatingWebhookConfigurations

B : Namespaces

C : Custom Resource Definitions (CRDs)

D : Pods and Services

Answer: A

Question 4

In a Kyverno policy definition, how can you reference the 'readinessProbe.tcpSocket.port' field three levels up from the current position?

Options :

A : $(./../../../readinessProbe/tcpSocket/port)

B : <./../../../readinessProbe/tcpSocket/port>

C : {{request.object.spec.containers.readinessProbe.tcpSocket.port}}

D : ${./../../../readinessProbe/tcpSocket/port}

Answer: A

Question 5

In Kyverno, how do deny rules differ from pattern-based validation rules?

Options :

A : Deny rules are less expressive and cannot use multiple conditions, unlike pattern-based rules.

B : Deny rules block resources when conditions are met, whereas pattern-based rules allow resources when patterns match.

C : Deny rules are only applicable to network policies, while pattern-based rules can be used for any resource.

D : Deny rules allow resources if the condition is true, while pattern-based rules block them.

Answer: B

Higher Test Marks with Free Online Kyverno-Certified-Associate Exam Practice