Question 1

In a Kyverno policy, how many child declarations can a single rule contain among Validate, Mutate, Generate, or VerifyImages?

Options :

A : One for each type, allowing multiple declarations.

B : No limit on the number of declarations.

C : Only one among Validate, Mutate, Generate, or VerifyImages.

D : Two declarations maximum.

Answer: C

Question 2

Which of the following is NOT a component of a check item in Kyverno's assertion trees?

Options :

A : mutate statement

B : assert statement

C : error statement

D : match statement

Answer: A

Question 3

Your Kubernetes cluster is experiencing API server timeouts, and you notice that Kyverno Pods are not running after an update to your node groups. What should you do first to restore cluster operability?

Options :

A : Exclude the Kyverno namespace from policy checks.

B : Delete the Kyverno validating and mutating webhook configurations.

C : Increase the memory limit of the Kyverno Pods.

D : Scale the Kyverno Deployment down to zero replicas and then back up.

Answer: B

Question 4

In a Kyverno policy, how can you uniquely identify the 'NetworkPolicy' resource from the 'antrea.io' API group and version 'v1alpha1' to avoid naming conflicts?

Options :

A : io.antrea/v1alpha1/NetworkPolicy

B : v1alpha1/antrea.io/NetworkPolicy

C : antrea.io/v1alpha1/NetworkPolicy

D : NetworkPolicy.antrea.io/v1alpha1

Answer: C

Question 5

If you discover a potential security vulnerability in Kyverno, which method should you use to report it to the Kyverno security team?

Options :

A : Send an email to [email protected] with detailed information.

B : Open a public issue on the Kyverno GitHub repository.

C : Post a message on Kyverno-s Slack channel.

D : Submit a form on the Cloud Native Computing Foundation website.

Answer: A

Free Kyverno-Certified-Associate Mock Exam – Practice Online Confidently

Buying Options: