Question 1

Which of the following is a Role created by Kyverno in its namespace?

Options :

A : kyverno:security-controller

B : kyverno:storage-controller

C : kyverno:admission-controller

D : kyverno:network-controller

Answer: C

Question 2

A Kubernetes administrator creates a Kyverno ClusterPolicy with the following configuration: - failureAction is set to Audit by default. - failureActionOverrides is defined to enforce policies in the 'production' namespace and audit in the 'development' namespace. What will be the failure action in a namespace named 'staging'?

Options :

A : Default to failureAction field

B : Enforce

C : Allow

D : Audit

Answer: A

Question 3

Which of the following is NOT a component of a check item in Kyverno's assertion trees?

Options :

A : mutate statement

B : assert statement

C : error statement

D : match statement

Answer: A

Question 4

When mutating existing resources in Kyverno, what is a crucial consideration regarding the mutation process?

Options :

A : It is an asynchronous process that may experience delays.

B : It requires no additional permissions beyond the default Kyverno setup.

C : It can only mutate resources during creation, not after.

D : It is a synchronous process that occurs instantaneously.

Answer: A

Question 5

How does setting the 'ownerReferences' field in a generated Kyverno resource affect its lifecycle?

Options :

A : It prevents the generated resource from being modified by any other controllers.

B : It assigns a new owner to the generated resource, independent of the source resource.

C : It ensures that the generated resource has elevated permissions in the cluster.

D : It links the generated resource to the source resource, ensuring it is deleted when the source is deleted.

Answer: D