Free Linux Foundation Kyverno-Certified-Associate Exam Questions

Become Linux Foundation Certified with updated Kyverno-Certified-Associate exam questions and correct answers

Page: 1 / 60

Total 299 Questions | Updated On: Jan 05, 2026

Add To Cart

Question 1

In a Kyverno policy, how can you uniquely identify the 'NetworkPolicy' resource from the 'antrea.io' API group and version 'v1alpha1' to avoid naming conflicts?

A : io.antrea/v1alpha1/NetworkPolicy

B : v1alpha1/antrea.io/NetworkPolicy

C : antrea.io/v1alpha1/NetworkPolicy

D : NetworkPolicy.antrea.io/v1alpha1

Answer: C

Question 2

What was a major breaking change introduced in Kyverno version 1.13?

A : Removal of wildcard view permissions for Kyverno controllers.

B : Introduction of a new Kyverno CLI tool for policy management.

C : Addition of new policy types for network management.

D : Deprecation of Helm as a supported installation method.

Answer: A

Question 3

What is the behavior of Kyverno when a deny rule with multiple conditions uses an 'any' block and one of the conditions evaluates to true?

A : Kyverno ignores the true condition and checks if all other conditions are also true.

B : Kyverno logs the violation but allows the resource to be created.

C : Kyverno stops evaluating further conditions and denies the resource immediately.

D : Kyverno continues evaluating the remaining conditions to collect all violations.

Answer: C

Question 4

Which security best practice is implemented in Kyverno Pods to enhance their security posture?

A : Privileged mode is enabled.

B : runAsRoot is set to true.

C : All capabilities are retained.

D : allowPrivilegeEscalation is set to false.

Answer: D

Question 5

How does setting the 'ownerReferences' field in a generated Kyverno resource affect its lifecycle?

A : It prevents the generated resource from being modified by any other controllers.

B : It assigns a new owner to the generated resource, independent of the source resource.

C : It ensures that the generated resource has elevated permissions in the cluster.

D : It links the generated resource to the source resource, ensuring it is deleted when the source is deleted.

Answer: D

Page: 1 / 60

Total 299 Questions | Updated On: Jan 05, 2026

Add To Cart