Question 1

Which of the following scenarios is best suited for Kyverno's policy enforcement capabilities?

Options :

A : Automating the deployment of applications without any restrictions.

B : Randomly mutating resource attributes for testing purposes.

C : Ensuring that all Kubernetes pods have specific labels to comply with organizational standards.

D : Disabling Kubernetes API access for all users.

Answer: C

Question 2

Which Kubernetes operation is exempted from image size validation in the 'block-large-images' Kyverno policy?

Options :

A : UPDATE

B : DELETE

C : CREATE

D : RESTART

Answer: B

Question 3

Which Kubernetes resources are explicitly exempted from being processed by dynamic admission controllers?

Options :

A : MutatingWebhookConfigurations and ValidatingWebhookConfigurations

B : Namespaces

C : Custom Resource Definitions (CRDs)

D : Pods and Services

Answer: A

Question 4

Which of the following is NOT a component of a check item in Kyverno's assertion trees?

Options :

A : mutate statement

B : assert statement

C : error statement

D : match statement

Answer: A

Question 5

Which integration strategy minimizes Kyverno's processing load by using PSA to enforce a baseline cluster-wide while Kyverno handles a more restrictive profile?

Options :

A : Use PSA to enforce the baseline profile cluster-wide and Kyverno’s podSecurity subrule to enforce the restricted profile.

B : Apply both PSA and Kyverno to enforce the same profile at the same scope.

C : Configure PSA to enforce baseline per namespace and Kyverno cluster-wide.

D : Enforce the restricted profile with PSA cluster-wide and handle baseline with Kyverno.

Answer: A

Free Kyverno-Certified-Associate Mock Exam – Practice Online Confidently

Buying Options: