Question 1

What is the behavior of Kyverno when a deny rule with multiple conditions uses an 'any' block and one of the conditions evaluates to true?

Options :

A : Kyverno ignores the true condition and checks if all other conditions are also true.

B : Kyverno logs the violation but allows the resource to be created.

C : Kyverno stops evaluating further conditions and denies the resource immediately.

D : Kyverno continues evaluating the remaining conditions to collect all violations.

Answer: C

Question 2

What precaution should be taken to ensure the availability of dynamic admission controllers in Kubernetes?

Options :

A : Allowing webhooks to include the controller-s own namespace

B : Configuring multiple replicas of the controller

C : Deploying the controller in the default namespace

D : Setting resource limits to minimal values

Answer: B

Question 3

Which of the following Kubernetes operations cannot be controlled by dynamic admission controllers?

Options :

A : UPDATE

B : CREATE

C : DELETE

D : GET

Answer: D

Question 4

Which of the following is a Role created by Kyverno in its namespace?

Options :

A : kyverno:security-controller

B : kyverno:storage-controller

C : kyverno:admission-controller

D : kyverno:network-controller

Answer: C

Question 5

Under which condition does Kyverno skip the auto-generation of Pod controller rules?

Options :

A : When the policy rule includes operations like DELETE.

B : When the 'pod-policies.kyverno.io/autogen-controllers' annotation includes all Pod controllers.

C : When the policy rule-s match or exclude blocks specify 'names', 'selector', or 'annotations'.

D : When the policy rule matches only Pods.

Answer: C

Free Kyverno-Certified-Associate Mock Exam – Practice Online Confidently