Question 1

Which of the following scenarios is best suited for Kyverno's policy enforcement capabilities?

Options :

A : Automating the deployment of applications without any restrictions.

B : Randomly mutating resource attributes for testing purposes.

C : Ensuring that all Kubernetes pods have specific labels to comply with organizational standards.

D : Disabling Kubernetes API access for all users.

Answer: C

Question 2

Which Kyverno 'jp' subcommand allows you to view the Abstract Syntax Tree (AST) of a JMESPath expression?

Options :

A : jp function

B : jp parse

C : jp ast

D : jp query

Answer: B

Question 3

When mutating existing resources in Kyverno, what is a crucial consideration regarding the mutation process?

Options :

A : It is an asynchronous process that may experience delays.

B : It requires no additional permissions beyond the default Kyverno setup.

C : It can only mutate resources during creation, not after.

D : It is a synchronous process that occurs instantaneously.

Answer: A

Question 4

What is the behavior of Kyverno when a deny rule with multiple conditions uses an 'any' block and one of the conditions evaluates to true?

Options :

A : Kyverno ignores the true condition and checks if all other conditions are also true.

B : Kyverno logs the violation but allows the resource to be created.

C : Kyverno stops evaluating further conditions and denies the resource immediately.

D : Kyverno continues evaluating the remaining conditions to collect all violations.

Answer: C

Question 5

What is the purpose of defining 'cel.paramKind' and 'cel.paramRef' in a Kyverno policy?

Options :

A : To specify the Kubernetes resource types the policy applies to.

B : To define the rules for resource mutation.

C : To bind the policy to a specific namespace.

D : To associate the policy with a parameter resource that provides configurable values.

Answer: D

Free Kyverno-Certified-Associate Mock Exam – Practice Online Confidently