Question 1

Under which condition does Kyverno skip the auto-generation of Pod controller rules?

Options :

A : When the policy rule includes operations like DELETE.

B : When the 'pod-policies.kyverno.io/autogen-controllers' annotation includes all Pod controllers.

C : When the policy rule-s match or exclude blocks specify 'names', 'selector', or 'annotations'.

D : When the policy rule matches only Pods.

Answer: C

Question 2

What is the default failure mode for Kyverno's admission webhooks, and what is its implication for cluster operability?

Options :

A : Fail-open; the cluster remains operable even if Kyverno is unavailable.

B : Retry until successful; the cluster continuously attempts to restore operability.

C : Ignore failures; the cluster operates without enforcing policies if Kyverno fails.

D : Fail-closed; the cluster may become inoperable if Kyverno is unavailable.

Answer: D

Question 3

Which Kubernetes resources are explicitly exempted from being processed by dynamic admission controllers?

Options :

A : MutatingWebhookConfigurations and ValidatingWebhookConfigurations

B : Namespaces

C : Custom Resource Definitions (CRDs)

D : Pods and Services

Answer: A

Question 4

In Kyverno, how do deny rules differ from pattern-based validation rules?

Options :

A : Deny rules are less expressive and cannot use multiple conditions, unlike pattern-based rules.

B : Deny rules block resources when conditions are met, whereas pattern-based rules allow resources when patterns match.

C : Deny rules are only applicable to network policies, while pattern-based rules can be used for any resource.

D : Deny rules allow resources if the condition is true, while pattern-based rules block them.

Answer: B

Question 5

If you discover a potential security vulnerability in Kyverno, which method should you use to report it to the Kyverno security team?

Options :

A : Send an email to [email protected] with detailed information.

B : Open a public issue on the Kyverno GitHub repository.

C : Post a message on Kyverno-s Slack channel.

D : Submit a form on the Cloud Native Computing Foundation website.

Answer: A

Confidently Practice Online with Free Kyverno-Certified-Associate Exam Cram