Tooling

You are configuring Flux to manage a multi-tenant cluster. You need to ensure that specific namespaces only allow images from an internal registry. Which tool should you use to enforce this at admission time?

You are using ArgoCD and need to ensure that secret values stored in Git via Sealed Secrets are decrypted only within the target cluster. What component performs the actual decryption of a SealedSecret resource?

You are using OPA Gatekeeper with GitOps. You want to prevent any deployment that does not have an 'owner' label. Where should this policy be applied to ensure it is enforced for all GitOps-driven changes?

When migrating from ArgoCD to Flux, you want to replicate the 'Sync Waves' behavior. Which Flux feature provides equivalent control over the order of resource reconciliation?

Which GitOps tool relies primarily on a pull-based model utilizing the 'Source Controller' and 'Kustomization' custom resources?

Your organization requires that all Kubernetes manifest changes be signed and encrypted before being pushed to Git. Which tool is primarily designed for this 'at-rest' encryption approach?

In an ArgoCD environment, you notice that a specific set of resources is being ignored during sync. What field in the 'argocd-cm' ConfigMap or the Application manifest is likely responsible?

You are using ArgoCD to deploy an application. You notice that the Application status remains 'OutOfSync' even after manual refreshes. Which feature should you examine to determine if the controller is failing to reach the cluster API?

Which of the following is a key advantage of using a 'pull' based GitOps model (like Flux or ArgoCD) over a 'push' based CI/CD pipeline?

You are using Flux with Kustomize. You want to apply different configurations for production and staging, but both use the same base manifests. Which Kustomize feature allows this?

You are managing secrets using SOPS with Age. You notice that Flux cannot decrypt the files. What is the most likely cause?

You have a large ArgoCD installation and want to limit the blast radius. Which feature allows you to restrict which namespaces an application can deploy to?

An ArgoCD application is configured with 'SelfHeal' set to true. If a developer manually modifies a Deployment's replica count via kubectl, what happens?

You are using ArgoCD and need to inject a value into a manifest that is not present in Git, such as a temporary credential. Which feature would you use to do this dynamic injection?

When troubleshooting a Kyverno policy, which command should you use to check if a specific resource complies with the policy?

What is the primary function of the Flux Image Reflector Controller?

What is the purpose of the 'SealedSecrets' custom resource?

You are debugging an ArgoCD sync failure. You find the 'Sync Status' is 'Failed'. Where is the most detailed error information located?

Which of these is a primary reason for using Helm charts in a GitOps workflow?

Which GitOps tool provides a dedicated CLI called 'argocd'?

You are using Flux and want to pause reconciliation for a specific application without deleting the resource. Which field should you modify?

You have a Git repository that contains multiple Kustomizations. You want Flux to update all of them based on a single trigger. How should you structure the repository?

In ArgoCD, what does the 'Revision' field in an Application manifest represent?

When using OPA Gatekeeper for policy enforcement, what resource is used to define the actual logic of the policy?

What is a 'GitOps Operator'?

You are using ArgoCD and need to ensure that a Helm chart is rendered correctly with a specific set of values. Where do you specify these values in the ArgoCD Application resource?

Which THREE of the following are valid components of the ArgoCD architecture?

When configuring Kyverno policies to secure a cluster, which TWO of the following actions can a policy perform?

You are debugging a flux-system reconciliation loop. You notice the Kustomization is stuck in 'Retrying'. What command shows the current status and reason for the failure?

Which THREE of the following are common methods for managing secrets in a GitOps workflow?

When evaluating ArgoCD vs Flux, which TWO of the following are distinct advantages of using Flux?

In a GitOps workflow, what is the best way to handle a configuration that must be different for production versus development clusters?

Which TWO of the following are valid ways to trigger a sync in ArgoCD?

Which TWO of the following are key features of the Flux Kustomization controller?

When using Kyverno, which THREE of the following can be used to validate Kubernetes resources?

Which TWO of the following are common GitOps challenges?

Which TWO of the following are true about ArgoCD ApplicationSets?

Which THREE of the following are essential tasks when implementing SOPS with GitOps?

Which THREE of the following items are commonly found in a Flux 'GitRepository' manifest?

Which TWO of the following tools allow for GitOps policy enforcement?

When using SOPS with Age, which THREE of the following are true regarding key management?

Which THREE of the following actions occur during an ArgoCD sync operation?