Related Practices

Why is 'Git' considered the 'source of truth' in GitOps?

In a GitOps environment, what is the main purpose of maintaining Infrastructure as Code?

Your organization wants to implement DevSecOps by integrating security scanning into a GitOps pipeline. Where should the vulnerability scan happen to prevent insecure configurations from ever reaching the cluster?

A company uses Terraform for IaC and Argo CD for application delivery. How should they manage the dependency between infrastructure provisioning and app deployment to ensure GitOps consistency?

When mapping a traditional CI/CD pipeline to GitOps, what is the primary role of the CD tool?

You are debugging a drift in a GitOps environment. The cluster state differs from the Git repository. What is the most likely cause if you are using Flux?

Which practice represents the 'DevSecOps' aspect in a GitOps pipeline?

A team is transitioning from traditional imperative scripts to declarative Configuration as Code. Which approach best satisfies the GitOps principle of using a desired state definition?

You are implementing a multi-environment strategy. Which Git branching strategy best supports GitOps?

When implementing a CI/CD pipeline for GitOps, how should you handle image tag updates?

What is the primary benefit of using a pull-based GitOps operator compared to a push-based CI/CD system?

When configuring a GitOps pipeline, what should be done to manage sensitive data like API keys?

What is the key difference between Configuration as Code and Infrastructure as Code in the context of GitOps?

Which tool provides the most native integration for managing Kubernetes manifests using Kustomize within a GitOps workflow?

In a GitOps pattern, how do you manage a rollback when an application deployment fails?

When using a GitOps operator that performs 'image polling', what is the risk of using a 'latest' tag?

You are auditing a GitOps process. Which of the following is an indicator that the process is NOT truly following GitOps principles?

In the context of a CI/CD pipeline, where does the 'GitOps' bridge typically occur?

How does the GitOps pattern simplify the audit process for a regulatory environment?

What is the most effective approach to handle 'secrets' in GitOps when you require strict compliance that mandates secrets never exist in plain text in the repo?

In a GitOps environment, what is the best strategy for managing external dependencies (like Helm charts)?

Which action should a developer take to deploy a new version of an application in a GitOps-based workflow?

What is the primary function of an 'Admission Controller' in a GitOps-based DevSecOps workflow?

Which of the following describes the 'Declarative' aspect of GitOps?

Why do you use a separate repository for application code and application manifests (deployment manifests) in GitOps?

You are managing a global cluster setup with GitOps. How do you handle configuration that must be identical across all clusters while allowing for regional variations?

When mapping traditional CI/CD to GitOps, which component from the traditional world is often 'decommissioned' or replaced?

What is the primary role of the GitOps operator during the reconciliation phase?

You notice that your GitOps pipeline is stuck in a loop. What is the most likely cause?

What is the best way to handle temporary, non-production overrides in a GitOps environment?

Which of these is a primary benefit of 'Infrastructure as Code' (IaC) in a GitOps workflow?

When migrating to GitOps, why is 'Pull' preferred over 'Push' for CD?

Which TWO of the following are core principles of the GitOps model?

Which THREE components are essential for a complete GitOps CI/CD pipeline?

Which TWO of the following are common challenges when implementing GitOps in an organization?

Which TWO of the following best describe the benefits of adopting GitOps?

Which THREE items should be included in your Git repository for a standard GitOps setup?

Which THREE strategies are effective for managing configuration at scale in a GitOps environment?

Which TWO of the following are common pitfalls when integrating DevSecOps into a GitOps pipeline?

Which THREE of these practices are essential to successfully transition from traditional CI/CD to GitOps?

A security auditor asks how your team handles secret management in a GitOps environment without exposing sensitive credentials in the Git repository. What is the standard GitOps practice for this requirement?

Your team is integrating a CI pipeline with a GitOps delivery model. Which of the following tasks should remain in the CI pipeline, and which should be moved to the CD/GitOps reconciliation process?

When implementing DevSecOps within a GitOps workflow, where should the automated policy enforcement (like OPA/Gatekeeper) occur?

You are migrating a legacy application deployment process to GitOps. The application requires a specific sequence of database migrations to run before the new container version is deployed. How do you implement this in a GitOps-friendly way?

In the context of 'Configuration as Code', why is it considered a best practice to use a declarative manifest format (like YAML) rather than imperative commands?

Which TWO of the following are core components of a mature GitOps-based DevSecOps practice?

Your organization uses a 'GitOps Operator' to manage deployments. What happens if a developer manually changes a configuration on the Kubernetes cluster using 'kubectl edit'?

Which TWO of the following are valid reasons to maintain a clear separation between the CI pipeline and the GitOps controller?

Which THREE of the following are primary benefits of adopting GitOps for CI/CD integration?

Your platform team runs a GitOps operator that continuously reconciles a Kubernetes cluster against a Git repository. A compliance auditor asks how you can prove that no unapproved manual changes have been applied to production over the last 90 days. Which practice should you implement to satisfy this requirement?

A platform team runs a GitOps operator that continuously reconciles cluster state from a Git repository. A compliance auditor asks how the team can prove which commit produced the configuration currently running in production six weeks ago, after many merges and rollbacks. Which practice best satisfies this requirement?

A team adopting GitOps wants to reduce the blast radius of a bad change and shorten mean time to recovery. They already store all manifests in Git and use an operator for reconciliation. Which practice most directly limits the impact of a faulty change reaching production?

An organization separates its GitOps repositories into an application repo and an environment configuration repo. Developers merge frequently into the application repo, while the environment repo pins image digests. A release engineer must promote a tested build from staging to production. Which action aligns with this separation of concerns?

A team is designing a GitOps workflow and wants to enforce policy and compliance before changes reach production clusters. Which two practices fit a GitOps-aligned governance model? (Choose two.)

A team wants to detect when someone manually edits a live resource so that the cluster diverges from Git. Their operator reconciles every five minutes. What is the most accurate statement about detection and remediation in this setup?