CGOA Practice Exam 2 — 20 Questions

Question 1

Which TWO of the following are common benefits of using a 'GitOps Operator'? (Select two)

Accepted Answer

They provide a single, declarative source of truth.. Operators provide continuous reconciliation of state and enable declarative management, reducing manual operational burden.

Answer

They manually restart the server every time a change is detected.

Answer

They require the user to have cluster-admin privileges to see the logs.

Answer

They eliminate the need for container images.

Question 2

Which of these is NOT a principle of GitOps?

Accepted Answer

Imperative manual updates.. GitOps is inherently declarative; imperative commands violate the core principle of a defined desired state.

Answer

Versioned and immutable state.

Answer

Declarative desired state.

Answer

Automated reconciliation.

Question 3

Which mechanism is used in a GitOps workflow to ensure that a 'Canary' deployment successfully rolls back if error rates spike?

Accepted Answer

Flagger AnalysisTemplates.. Flagger monitors metrics via a provider (e.g., Prometheus) during the canary phase. If thresholds are exceeded, it automatically triggers a rollback to the previous version.

Answer

Kubernetes Liveness Probes.

Answer

Argo Rollouts 'pause' condition.

Answer

Git revert commands via CI/CD.

Question 4

You are designing a multi-cluster deployment with Argo CD. You want to avoid defining 50 individual Application manifests. Which feature should you use?

Accepted Answer

Argo CD ApplicationSets.. ApplicationSets use generators (like the Cluster generator) to dynamically create Applications based on cluster list, significantly reducing configuration overhead.

Answer

Helm subcharts.

Answer

Git submodules.

Answer

Kubernetes Custom Resource Definitions (CRDs).

Question 5

What happens if the 'revision' in an Argo CD Application points to a branch that does not exist?

Accepted Answer

The application will be marked as 'Invalid' or 'Degraded'.. Argo CD will report an 'Invalid' state because it cannot resolve the target revision specified in the manifest.

Answer

It will create the branch automatically.

Answer

It will stop the Argo CD controller.

Answer

It will sync the 'main' branch instead.

Question 6

Which THREE of the following are valid components or patterns used in Progressive Delivery with GitOps? (Select THREE)

Accepted Answer

AnalysisTemplates. Argo Rollouts, AnalysisTemplates, and blue-green deployments are all core components and patterns used to achieve progressive delivery within a GitOps ecosystem.

Answer

Git-Branch-Per-Environment

Answer

Argo Workflows

Question 7

Which of the following is a core principle of GitOps?

Accepted Answer

The system state is defined in a version-controlled repository.. GitOps defines the desired state in a version-controlled repository, which acts as the 'single source of truth'.

Answer

Manual intervention is required to scale deployments.

Answer

Developers should have direct 'cluster-admin' access.

Answer

The system state is defined by the latest CI pipeline execution.

Question 8

Which TWO of the following help ensure successful multi-cluster GitOps rollouts? (Select two)

Accepted Answer

Using canary deployment phases per cluster group.. Phased rollouts and cluster grouping ensure that if a deployment fails, it is contained to a specific set of clusters rather than the entire fleet.

Answer

Deploying to all clusters at the same time.

Answer

Using only one Git repository for all cluster configurations.

Answer

Hardcoding cluster IPs in the manifest files.

Question 9

In a GitOps promotion pipeline, why is it recommended to tag container images with a unique Git commit SHA instead of 'latest'?

Accepted Answer

To ensure immutability and auditability.. Using the Git commit SHA provides traceability and immutability. 'Latest' is a mutable tag that can point to different versions over time, making rollbacks impossible.

Answer

Because the container registry requires unique SHAs.

Answer

To reduce the size of the container image.

Answer

Because 'latest' is deprecated by Docker.

Question 10

What is the primary role of the 'Reconciler' in a GitOps operator?

Accepted Answer

To match the actual state to the desired state.. The reconciler continuously monitors the cluster and the target state (Git), identifying differences and applying actions to make the cluster match the Git definition.

Answer

To delete old pods to save memory.

Answer

To send notifications to Slack.

Answer

To build images.

Question 11

What is the impact of enabling 'selfHeal' in an Argo CD Application sync policy?

Accepted Answer

It automatically reverts manual changes to the cluster.. If 'selfHeal' is true, Argo CD will automatically overwrite any manual changes made to the cluster, reverting it to the Git-defined state.

Answer

It automatically creates backups of the cluster state.

Answer

It automatically patches the application with the latest security updates.

Answer

It disables the UI for that application.

Question 12

Which TWO of the following are true about the 'Pull' model in GitOps? (Select two)

Accepted Answer

It improves security by removing the need for cluster credentials in CI.. The pull model uses an internal controller to fetch desired state from Git, which is more secure and reliable than pushing from an external CI system.

Answer

It is only supported for Helm charts.

Answer

It requires opening an inbound port on the cluster firewall.

Answer

It requires the CI pipeline to be active 24/7.

Question 13

Which of the following best describes the 'Declarative' principle in GitOps?

Accepted Answer

Defining the target state in configuration files.. Declarative means defining the end state of the system, rather than the sequence of commands to reach that state.

Answer

Using an interactive terminal to manage resources.

Answer

Providing a script to update resources.

Answer

Requiring manual approval for every reconciliation.

Question 14

Which THREE are standard ways to implement GitOps with Helm?

Accepted Answer

Using a GitOps operator to trigger 'helm install'.. Helm can be used by packaging charts in Git, using a GitOps operator to render templates, or by storing values files in Git.

Answer

Running 'helm upgrade' manually.

Answer

Only storing the chart source code.

Question 15

Which TWO of the following are considered advantages of the GitOps approach?

Accepted Answer

Improved auditability through version-controlled commits.. GitOps improves auditability through Git logs and reduces the risk of manual configuration errors.

Answer

Increased reliance on manual CLI interventions.

Answer

Automatic creation of new business requirements.

Answer

Ability to bypass security protocols.

Question 16

You want to use Helm for your GitOps deployments. Where should the 'values.yaml' file reside for environment-specific overrides?

Accepted Answer

In the Git repository, per environment.. Environment-specific values files (e.g., values-prod.yaml) are typically stored in the Git repository alongside the chart or in a separate environment-specific folder, allowing for clear separation of concerns.

Answer

In a local machine folder not tracked by Git.

Answer

In the Argo CD global settings.

Answer

Inside the container image.

Question 17

You are using Argo Rollouts for progressive delivery. You want to execute a 'AnalysisRun' before switching traffic. Where is the 'AnalysisTemplate' defined?

Accepted Answer

As a Kubernetes resource in Git.. The AnalysisTemplate is a Kubernetes resource that defines the metric queries and thresholds. It is often stored in the same Git repository as the application manifests.

Answer

In the Argo CD global configuration file.

Answer

Hardcoded in the application binary.

Answer

By the Service Mesh control plane directly.

Question 18

Which TWO of the following are features of progressive delivery in GitOps? (Select two)

Accepted Answer

Gradual traffic shifting between application versions.. Progressive delivery allows for safer deployments by limiting the blast radius through canary or blue-green releases and automated metric-based rollbacks.

Answer

Manually logging into pods to check health.

Answer

Immediate deployment of all changes to the entire cluster.

Answer

Removing all health checks from the application.

Question 19

You are using a 'Pull' based GitOps model (e.g., Flux or Argo CD). Why is it considered more secure than a 'Push' based CI/CD model?

Accepted Answer

It eliminates the need for cluster credentials on the CI server.. In a Pull model, the cluster agent pulls changes from Git. The cluster does not need inbound firewall access from the CI/CD server, and no secrets are stored on the CI server.

Answer

It allows faster deployment times.

Answer

It does not require a container registry.

Answer

It is easier to configure with SSH keys.

Question 20

When implementing multi-cluster GitOps, which THREE components are critical for success? (Select three)

Accepted Answer

Secure communication channel (e.g., mTLS/VPN) between management and targets.. A robust multi-cluster strategy requires a centralized management plane, a way to handle environment-specific differences, and secure connectivity between the hub and spoke clusters.

Answer

A shared database for all clusters to store secrets.

Answer

Uniform network latency across all clusters.