Question 1

Which of the following is a Role created by Kyverno in its namespace?

Options :

A : kyverno:security-controller

B : kyverno:storage-controller

C : kyverno:admission-controller

D : kyverno:network-controller

Answer: C

Question 2

Which of the following Kubernetes operations cannot be controlled by dynamic admission controllers?

Options :

A : UPDATE

B : CREATE

C : DELETE

D : GET

Answer: D

Question 3

When mutating existing resources in Kyverno, what is a crucial consideration regarding the mutation process?

Options :

A : It is an asynchronous process that may experience delays.

B : It requires no additional permissions beyond the default Kyverno setup.

C : It can only mutate resources during creation, not after.

D : It is a synchronous process that occurs instantaneously.

Answer: A

Question 4

Which security best practice is implemented in Kyverno Pods to enhance their security posture?

Options :

A : Privileged mode is enabled.

B : runAsRoot is set to true.

C : All capabilities are retained.

D : allowPrivilegeEscalation is set to false.

Answer: D

Question 5

Your Kubernetes cluster is experiencing API server timeouts, and you notice that Kyverno Pods are not running after an update to your node groups. What should you do first to restore cluster operability?

Options :

A : Exclude the Kyverno namespace from policy checks.

B : Delete the Kyverno validating and mutating webhook configurations.

C : Increase the memory limit of the Kyverno Pods.

D : Scale the Kyverno Deployment down to zero replicas and then back up.

Answer: B

Higher Test Marks with Free Online Kyverno-Certified-Associate Exam Practice

Buying Options: