Question 1

Which of the following is a Role created by Kyverno in its namespace?

Options :

A : kyverno:security-controller

B : kyverno:storage-controller

C : kyverno:admission-controller

D : kyverno:network-controller

Answer: C

Question 2

If you discover a potential security vulnerability in Kyverno, which method should you use to report it to the Kyverno security team?

Options :

A : Send an email to [email protected] with detailed information.

B : Open a public issue on the Kyverno GitHub repository.

C : Post a message on Kyverno-s Slack channel.

D : Submit a form on the Cloud Native Computing Foundation website.

Answer: A

Question 3

What is the consequence of disabling Kyverno's dynamic webhook management by setting the flag --autoUpdateWebhooks=false?

Options :

A : The Kubernetes API server will send AdmissionReview requests for all resources to Kyverno.

B : Kyverno will no longer process any admission requests.

C : Webhooks will only process excluded namespaces.

D : Resource mutations will cease to function.

Answer: A

Question 4

What is the function of setting 'synchronize: true' in a Kyverno generate rule?

Options :

A : It allows the generated resource to be periodically synced with an external data source.

B : It ensures that any changes to the source resource will automatically update the generated resource.

C : It enables bidirectional synchronization between source and destination resources.

D : It forces the generated resource to remain read-only.

Answer: B

Question 5

In a Kyverno policy definition, how can you reference the 'readinessProbe.tcpSocket.port' field three levels up from the current position?

Options :

A : $(./../../../readinessProbe/tcpSocket/port)

B : <./../../../readinessProbe/tcpSocket/port>

C : {{request.object.spec.containers.readinessProbe.tcpSocket.port}}

D : ${./../../../readinessProbe/tcpSocket/port}

Answer: A