Question 1

A Kubernetes administrator creates a Kyverno ClusterPolicy with the following configuration: - failureAction is set to Audit by default. - failureActionOverrides is defined to enforce policies in the 'production' namespace and audit in the 'development' namespace. What will be the failure action in a namespace named 'staging'?

Options :

A : Default to failureAction field

B : Enforce

C : Allow

D : Audit

Answer: A

Question 2

What is the role of CEL (Common Expression Language) expressions in Kyverno policies?

Options :

A : They specify the resource types to which the policy applies.

B : They provide a way to write conditional validation logic for resource specifications.

C : They define mutation rules for Kubernetes resources.

D : They handle the generation of new resources based on existing ones.

Answer: B

Question 3

What precaution should be taken to ensure the availability of dynamic admission controllers in Kubernetes?

Options :

A : Allowing webhooks to include the controller-s own namespace

B : Configuring multiple replicas of the controller

C : Deploying the controller in the default namespace

D : Setting resource limits to minimal values

Answer: B

Question 4

What is the behavior of Kyverno when a deny rule with multiple conditions uses an 'any' block and one of the conditions evaluates to true?

Options :

A : Kyverno ignores the true condition and checks if all other conditions are also true.

B : Kyverno logs the violation but allows the resource to be created.

C : Kyverno stops evaluating further conditions and denies the resource immediately.

D : Kyverno continues evaluating the remaining conditions to collect all violations.

Answer: C

Question 5

What is the consequence of disabling Kyverno's dynamic webhook management by setting the flag --autoUpdateWebhooks=false?

Options :

A : The Kubernetes API server will send AdmissionReview requests for all resources to Kyverno.

B : Kyverno will no longer process any admission requests.

C : Webhooks will only process excluded namespaces.

D : Resource mutations will cease to function.

Answer: A