Tooling

You are configuring Flux to manage a multi-tenant cluster. You need to ensure that specific namespaces only allow images from an internal registry. Which tool should you use to enforce this at admission time?

You are using ArgoCD and need to ensure that secret values stored in Git via Sealed Secrets are decrypted only within the target cluster. What component performs the actual decryption of a SealedSecret resource?

You are using OPA Gatekeeper with GitOps. You want to prevent any deployment that does not have an 'owner' label. Where should this policy be applied to ensure it is enforced for all GitOps-driven changes?

When migrating from ArgoCD to Flux, you want to replicate the 'Sync Waves' behavior. Which Flux feature provides equivalent control over the order of resource reconciliation?

Which GitOps tool relies primarily on a pull-based model utilizing the 'Source Controller' and 'Kustomization' custom resources?

Which of the following is a key advantage of using a 'pull' based GitOps model (like Flux or ArgoCD) over a 'push' based CI/CD pipeline?

You are using Flux with Kustomize. You want to apply different configurations for production and staging, but both use the same base manifests. Which Kustomize feature allows this?

You are managing secrets using SOPS with Age. You notice that Flux cannot decrypt the files. What is the most likely cause?

You have a large ArgoCD installation and want to limit the blast radius. Which feature allows you to restrict which namespaces an application can deploy to?

An ArgoCD application is configured with 'SelfHeal' set to true. If a developer manually modifies a Deployment's replica count via kubectl, what happens?

When troubleshooting a Kyverno policy, which command should you use to check if a specific resource complies with the policy?

What is the purpose of the 'SealedSecrets' custom resource?

You are debugging an ArgoCD sync failure. You find the 'Sync Status' is 'Failed'. Where is the most detailed error information located?

Which of these is a primary reason for using Helm charts in a GitOps workflow?

Which GitOps tool provides a dedicated CLI called 'argocd'?

You are using Flux and want to pause reconciliation for a specific application without deleting the resource. Which field should you modify?

You have a Git repository that contains multiple Kustomizations. You want Flux to update all of them based on a single trigger. How should you structure the repository?

In ArgoCD, what does the 'Revision' field in an Application manifest represent?

When using OPA Gatekeeper for policy enforcement, what resource is used to define the actual logic of the policy?

You are using ArgoCD and need to ensure that a Helm chart is rendered correctly with a specific set of values. Where do you specify these values in the ArgoCD Application resource?

Which THREE of the following are valid components of the ArgoCD architecture?

When configuring Kyverno policies to secure a cluster, which TWO of the following actions can a policy perform?

You are debugging a flux-system reconciliation loop. You notice the Kustomization is stuck in 'Retrying'. What command shows the current status and reason for the failure?

Which THREE of the following are common methods for managing secrets in a GitOps workflow?

When evaluating ArgoCD vs Flux, which TWO of the following are distinct advantages of using Flux?

In a GitOps workflow, what is the best way to handle a configuration that must be different for production versus development clusters?

Which TWO of the following are valid ways to trigger a sync in ArgoCD?

Which TWO of the following are key features of the Flux Kustomization controller?

When using Kyverno, which THREE of the following can be used to validate Kubernetes resources?

Which TWO of the following are common GitOps challenges?

Which TWO of the following are true about ArgoCD ApplicationSets?

Which THREE of the following are essential tasks when implementing SOPS with GitOps?

Which THREE of the following items are commonly found in a Flux 'GitRepository' manifest?

Which TWO of the following tools allow for GitOps policy enforcement?

When using SOPS with Age, which THREE of the following are true regarding key management?

Which THREE of the following actions occur during an ArgoCD sync operation?

You are running Argo CD on a Kubernetes cluster. A developer reports that the argocd-application-controller repeatedly logs 'Failed to load target state: rpc error: code = Unknown desc = comparison error' for one Application, and the Application is stuck in the 'Unknown' health state. The cluster's outbound internet access is blocked, and the Application sources manifests from a private Git repository over HTTPS. Which component of Argo CD must you check first to resolve this?

You are using Flux with a GitRepository source that points to a private Git repository over HTTPS. Flux is failing to fetch the repository with an authentication error. You have created a Kubernetes Secret with the username and password. Which field in the GitRepository spec must reference this Secret?

You are using Argo CD to deploy an application. You want to ensure that Argo CD automatically synchronizes the application whenever the Git repository changes. Which sync policy should you configure?

You are using Flux to manage a multi-tenant cluster. You want to enforce that all Kustomizations in a specific namespace can only deploy resources that are allowed by a policy. You have decided to use OPA Gatekeeper. Which two resources are required to define and enforce a policy in Gatekeeper? (Choose two.)