Question 1

In a Kyverno policy, how many child declarations can a single rule contain among Validate, Mutate, Generate, or VerifyImages?

Options :

A : One for each type, allowing multiple declarations.

B : No limit on the number of declarations.

C : Only one among Validate, Mutate, Generate, or VerifyImages.

D : Two declarations maximum.

Answer: C

Question 2

Which integration strategy minimizes Kyverno's processing load by using PSA to enforce a baseline cluster-wide while Kyverno handles a more restrictive profile?

Options :

A : Use PSA to enforce the baseline profile cluster-wide and Kyverno’s podSecurity subrule to enforce the restricted profile.

B : Apply both PSA and Kyverno to enforce the same profile at the same scope.

C : Configure PSA to enforce baseline per namespace and Kyverno cluster-wide.

D : Enforce the restricted profile with PSA cluster-wide and handle baseline with Kyverno.

Answer: A

Question 3

Your Kubernetes cluster is experiencing API server timeouts, and you notice that Kyverno Pods are not running after an update to your node groups. What should you do first to restore cluster operability?

Options :

A : Exclude the Kyverno namespace from policy checks.

B : Delete the Kyverno validating and mutating webhook configurations.

C : Increase the memory limit of the Kyverno Pods.

D : Scale the Kyverno Deployment down to zero replicas and then back up.

Answer: B

Question 4

What is the function of setting 'synchronize: true' in a Kyverno generate rule?

Options :

A : It allows the generated resource to be periodically synced with an external data source.

B : It ensures that any changes to the source resource will automatically update the generated resource.

C : It enables bidirectional synchronization between source and destination resources.

D : It forces the generated resource to remain read-only.

Answer: B

Question 5

What precaution should be taken to ensure the availability of dynamic admission controllers in Kubernetes?

Options :

A : Allowing webhooks to include the controller-s own namespace

B : Configuring multiple replicas of the controller

C : Deploying the controller in the default namespace

D : Setting resource limits to minimal values

Answer: B

Free Kyverno-Certified-Associate Mock Exam – Practice Online Confidently

Buying Options: