Question 1

A Kubernetes administrator creates a Kyverno ClusterPolicy with the following configuration: - failureAction is set to Audit by default. - failureActionOverrides is defined to enforce policies in the 'production' namespace and audit in the 'development' namespace. What will be the failure action in a namespace named 'staging'?

Options :

A : Default to failureAction field

B : Enforce

C : Allow

D : Audit

Answer: A

Question 2

What is the role of CEL (Common Expression Language) expressions in Kyverno policies?

Options :

A : They specify the resource types to which the policy applies.

B : They provide a way to write conditional validation logic for resource specifications.

C : They define mutation rules for Kubernetes resources.

D : They handle the generation of new resources based on existing ones.

Answer: B

Question 3

In a Kyverno policy, how can you uniquely identify the 'NetworkPolicy' resource from the 'antrea.io' API group and version 'v1alpha1' to avoid naming conflicts?

Options :

A : io.antrea/v1alpha1/NetworkPolicy

B : v1alpha1/antrea.io/NetworkPolicy

C : antrea.io/v1alpha1/NetworkPolicy

D : NetworkPolicy.antrea.io/v1alpha1

Answer: C

Question 4

Which of the following Kubernetes operations cannot be controlled by dynamic admission controllers?

Options :

A : UPDATE

B : CREATE

C : DELETE

D : GET

Answer: D

Question 5

If you discover a potential security vulnerability in Kyverno, which method should you use to report it to the Kyverno security team?

Options :

A : Send an email to [email protected] with detailed information.

B : Open a public issue on the Kyverno GitHub repository.

C : Post a message on Kyverno-s Slack channel.

D : Submit a form on the Cloud Native Computing Foundation website.

Answer: A

Higher Test Marks with Free Online Kyverno-Certified-Associate Exam Practice

Buying Options: