Question 1

In a Kyverno policy definition, how can you reference the 'readinessProbe.tcpSocket.port' field three levels up from the current position?

Options :

A : $(./../../../readinessProbe/tcpSocket/port)

B : <./../../../readinessProbe/tcpSocket/port>

C : {{request.object.spec.containers.readinessProbe.tcpSocket.port}}

D : ${./../../../readinessProbe/tcpSocket/port}

Answer: A

Question 2

Which Kyverno 'jp' subcommand allows you to view the Abstract Syntax Tree (AST) of a JMESPath expression?

Options :

A : jp function

B : jp parse

C : jp ast

D : jp query

Answer: B

Question 3

Which of the following scenarios is best suited for Kyverno's policy enforcement capabilities?

Options :

A : Automating the deployment of applications without any restrictions.

B : Randomly mutating resource attributes for testing purposes.

C : Ensuring that all Kubernetes pods have specific labels to comply with organizational standards.

D : Disabling Kubernetes API access for all users.

Answer: C

Question 4

What is the role of 'validationFailureAction: Enforce' in a Kyverno policy?

Options :

A : It only logs validation failures without blocking resource creation.

B : It ignores validation failures and allows resource creation.

C : It automatically fixes validation failures to comply with the policy.

D : It blocks resource creation if validation fails.

Answer: D

Question 5

What is the behavior of Kyverno when a deny rule with multiple conditions uses an 'any' block and one of the conditions evaluates to true?

Options :

A : Kyverno ignores the true condition and checks if all other conditions are also true.

B : Kyverno logs the violation but allows the resource to be created.

C : Kyverno stops evaluating further conditions and denies the resource immediately.

D : Kyverno continues evaluating the remaining conditions to collect all violations.

Answer: C