Question 1

Which Kubernetes operation is exempted from image size validation in the 'block-large-images' Kyverno policy?

Options :

A : UPDATE

B : DELETE

C : CREATE

D : RESTART

Answer: B

Question 2

Which of the following is a Role created by Kyverno in its namespace?

Options :

A : kyverno:security-controller

B : kyverno:storage-controller

C : kyverno:admission-controller

D : kyverno:network-controller

Answer: C

Question 3

When mutating existing resources in Kyverno, what is a crucial consideration regarding the mutation process?

Options :

A : It is an asynchronous process that may experience delays.

B : It requires no additional permissions beyond the default Kyverno setup.

C : It can only mutate resources during creation, not after.

D : It is a synchronous process that occurs instantaneously.

Answer: A

Question 4

Which security best practice is implemented in Kyverno Pods to enhance their security posture?

Options :

A : Privileged mode is enabled.

B : runAsRoot is set to true.

C : All capabilities are retained.

D : allowPrivilegeEscalation is set to false.

Answer: D

Question 5

How does setting the 'ownerReferences' field in a generated Kyverno resource affect its lifecycle?

Options :

A : It prevents the generated resource from being modified by any other controllers.

B : It assigns a new owner to the generated resource, independent of the source resource.

C : It ensures that the generated resource has elevated permissions in the cluster.

D : It links the generated resource to the source resource, ensuring it is deleted when the source is deleted.

Answer: D

Free Kyverno-Certified-Associate Mock Exam – Practice Online Confidently