Question 1

What is the default failure mode for Kyverno's admission webhooks, and what is its implication for cluster operability?

Options :

A : Fail-open; the cluster remains operable even if Kyverno is unavailable.

B : Retry until successful; the cluster continuously attempts to restore operability.

C : Ignore failures; the cluster operates without enforcing policies if Kyverno fails.

D : Fail-closed; the cluster may become inoperable if Kyverno is unavailable.

Answer: D

Question 2

What is the role of CEL (Common Expression Language) expressions in Kyverno policies?

Options :

A : They specify the resource types to which the policy applies.

B : They provide a way to write conditional validation logic for resource specifications.

C : They define mutation rules for Kubernetes resources.

D : They handle the generation of new resources based on existing ones.

Answer: B

Question 3

Which integration strategy minimizes Kyverno's processing load by using PSA to enforce a baseline cluster-wide while Kyverno handles a more restrictive profile?

Options :

A : Use PSA to enforce the baseline profile cluster-wide and Kyverno’s podSecurity subrule to enforce the restricted profile.

B : Apply both PSA and Kyverno to enforce the same profile at the same scope.

C : Configure PSA to enforce baseline per namespace and Kyverno cluster-wide.

D : Enforce the restricted profile with PSA cluster-wide and handle baseline with Kyverno.

Answer: A

Question 4

Under which condition does Kyverno skip the auto-generation of Pod controller rules?

Options :

A : When the policy rule includes operations like DELETE.

B : When the 'pod-policies.kyverno.io/autogen-controllers' annotation includes all Pod controllers.

C : When the policy rule-s match or exclude blocks specify 'names', 'selector', or 'annotations'.

D : When the policy rule matches only Pods.

Answer: C

Question 5

Which Kyverno 'jp' subcommand allows you to view the Abstract Syntax Tree (AST) of a JMESPath expression?

Options :

A : jp function

B : jp parse

C : jp ast

D : jp query

Answer: B