Question 1

Which of the following is NOT a component of a check item in Kyverno's assertion trees?

Options :

A : mutate statement

B : assert statement

C : error statement

D : match statement

Answer: A

Question 2

In a Kyverno policy, how many child declarations can a single rule contain among Validate, Mutate, Generate, or VerifyImages?

Options :

A : One for each type, allowing multiple declarations.

B : No limit on the number of declarations.

C : Only one among Validate, Mutate, Generate, or VerifyImages.

D : Two declarations maximum.

Answer: C

Question 3

What is the consequence of disabling Kyverno's dynamic webhook management by setting the flag --autoUpdateWebhooks=false?

Options :

A : The Kubernetes API server will send AdmissionReview requests for all resources to Kyverno.

B : Kyverno will no longer process any admission requests.

C : Webhooks will only process excluded namespaces.

D : Resource mutations will cease to function.

Answer: A

Question 4

What was a major breaking change introduced in Kyverno version 1.13?

Options :

A : Removal of wildcard view permissions for Kyverno controllers.

B : Introduction of a new Kyverno CLI tool for policy management.

C : Addition of new policy types for network management.

D : Deprecation of Helm as a supported installation method.

Answer: A

Question 5

In a Kyverno policy, how can you uniquely identify the 'NetworkPolicy' resource from the 'antrea.io' API group and version 'v1alpha1' to avoid naming conflicts?

Options :

A : io.antrea/v1alpha1/NetworkPolicy

B : v1alpha1/antrea.io/NetworkPolicy

C : antrea.io/v1alpha1/NetworkPolicy

D : NetworkPolicy.antrea.io/v1alpha1

Answer: C