Question 1

In Kyverno, how do deny rules differ from pattern-based validation rules?

Options :

A : Deny rules are less expressive and cannot use multiple conditions, unlike pattern-based rules.

B : Deny rules block resources when conditions are met, whereas pattern-based rules allow resources when patterns match.

C : Deny rules are only applicable to network policies, while pattern-based rules can be used for any resource.

D : Deny rules allow resources if the condition is true, while pattern-based rules block them.

Answer: B

Question 2

Which integration strategy minimizes Kyverno's processing load by using PSA to enforce a baseline cluster-wide while Kyverno handles a more restrictive profile?

Options :

A : Use PSA to enforce the baseline profile cluster-wide and Kyverno’s podSecurity subrule to enforce the restricted profile.

B : Apply both PSA and Kyverno to enforce the same profile at the same scope.

C : Configure PSA to enforce baseline per namespace and Kyverno cluster-wide.

D : Enforce the restricted profile with PSA cluster-wide and handle baseline with Kyverno.

Answer: A

Question 3

In a Kyverno policy definition, how can you reference the 'readinessProbe.tcpSocket.port' field three levels up from the current position?

Options :

A : $(./../../../readinessProbe/tcpSocket/port)

B : <./../../../readinessProbe/tcpSocket/port>

C : {{request.object.spec.containers.readinessProbe.tcpSocket.port}}

D : ${./../../../readinessProbe/tcpSocket/port}

Answer: A

Question 4

What is the consequence of disabling Kyverno's dynamic webhook management by setting the flag --autoUpdateWebhooks=false?

Options :

A : The Kubernetes API server will send AdmissionReview requests for all resources to Kyverno.

B : Kyverno will no longer process any admission requests.

C : Webhooks will only process excluded namespaces.

D : Resource mutations will cease to function.

Answer: A

Question 5

Which of the following is a Role created by Kyverno in its namespace?

Options :

A : kyverno:security-controller

B : kyverno:storage-controller

C : kyverno:admission-controller

D : kyverno:network-controller

Answer: C

Smartly Prepare Exam with Free Online Kyverno-Certified-Associate Practice Test

Buying Options: