Question 1

Which of the following scenarios is best suited for Kyverno's policy enforcement capabilities?

Options :

A : Automating the deployment of applications without any restrictions.

B : Randomly mutating resource attributes for testing purposes.

C : Ensuring that all Kubernetes pods have specific labels to comply with organizational standards.

D : Disabling Kubernetes API access for all users.

Answer: C

Question 2

Which integration strategy minimizes Kyverno's processing load by using PSA to enforce a baseline cluster-wide while Kyverno handles a more restrictive profile?

Options :

A : Use PSA to enforce the baseline profile cluster-wide and Kyverno’s podSecurity subrule to enforce the restricted profile.

B : Apply both PSA and Kyverno to enforce the same profile at the same scope.

C : Configure PSA to enforce baseline per namespace and Kyverno cluster-wide.

D : Enforce the restricted profile with PSA cluster-wide and handle baseline with Kyverno.

Answer: A

Question 3

Your Kubernetes cluster is experiencing API server timeouts, and you notice that Kyverno Pods are not running after an update to your node groups. What should you do first to restore cluster operability?

Options :

A : Exclude the Kyverno namespace from policy checks.

B : Delete the Kyverno validating and mutating webhook configurations.

C : Increase the memory limit of the Kyverno Pods.

D : Scale the Kyverno Deployment down to zero replicas and then back up.

Answer: B

Question 4

Which Kubernetes resources are explicitly exempted from being processed by dynamic admission controllers?

Options :

A : MutatingWebhookConfigurations and ValidatingWebhookConfigurations

B : Namespaces

C : Custom Resource Definitions (CRDs)

D : Pods and Services

Answer: A

Question 5

What is the purpose of defining 'cel.paramKind' and 'cel.paramRef' in a Kyverno policy?

Options :

A : To specify the Kubernetes resource types the policy applies to.

B : To define the rules for resource mutation.

C : To bind the policy to a specific namespace.

D : To associate the policy with a parameter resource that provides configurable values.

Answer: D