Free Linux Foundation Kyverno-Certified-Associate Exam Questions

Become Linux Foundation Certified with updated Kyverno-Certified-Associate exam questions and correct answers

Page: 1 / 60

Total 299 Questions | Updated On: Feb 18, 2025

Add To Cart

Question 1

A Kubernetes administrator creates a Kyverno ClusterPolicy with the following configuration: - failureAction is set to Audit by default. - failureActionOverrides is defined to enforce policies in the 'production' namespace and audit in the 'development' namespace. What will be the failure action in a namespace named 'staging'?

A : Default to failureAction field

B : Enforce

C : Allow

D : Audit

Answer: A

Question 2

In a Kyverno policy, how can you uniquely identify the 'NetworkPolicy' resource from the 'antrea.io' API group and version 'v1alpha1' to avoid naming conflicts?

A : io.antrea/v1alpha1/NetworkPolicy

B : v1alpha1/antrea.io/NetworkPolicy

C : antrea.io/v1alpha1/NetworkPolicy

D : NetworkPolicy.antrea.io/v1alpha1

Answer: C

Question 3

Your Kubernetes cluster is experiencing API server timeouts, and you notice that Kyverno Pods are not running after an update to your node groups. What should you do first to restore cluster operability?

A : Exclude the Kyverno namespace from policy checks.

B : Delete the Kyverno validating and mutating webhook configurations.

C : Increase the memory limit of the Kyverno Pods.

D : Scale the Kyverno Deployment down to zero replicas and then back up.

Answer: B

Question 4

In the 'verify-manifest-integrity' Kyverno ClusterPolicy, which field specifies the public key used to verify the signatures of Deployment manifests?

A : attestors.entries.keys.publicKeys

B : spec.validationFailureAction

C : ignoreFields.objects.fields

D : metadata.annotations