CGOA Practice Exam 4 — 20 Questions

Question 1

When utilizing Git as the 'Source of Truth' for a cluster, what happens if the cluster state diverges from Git?

Accepted Answer

The controller detects the drift and reports it as out-of-sync.. Drift detection allows the GitOps controller to identify when the cluster state has deviated from the declared Git state.

Answer

The controller alerts the administrator but takes no action.

Answer

The Git repository is updated to reflect the new cluster state.

Answer

The cluster ignores the Git repository until a new commit is pushed.

Question 2

When configuring a GitOps tool, what is the purpose of a 'webhook' in relation to the Git repository?

Accepted Answer

To trigger an immediate reconciliation attempt when a push occurs.. Webhooks allow the Git server to notify the GitOps controller that a change has occurred, triggering an immediate sync check.

Answer

To encrypt the traffic between the cluster and Git.

Answer

To replace the need for an SSH key.

Answer

To store the application images.

Question 3

You are implementing GitOps for a legacy application. Why might this be challenging?

Accepted Answer

Legacy applications often lack declarative configuration files.. Legacy applications often lack declarative definitions and might require manual setup steps that are difficult to automate.

Answer

GitOps doesn't support Java applications.

Answer

The cluster API is too slow for legacy apps.

Answer

Git servers cannot store old code.

Question 4

Which TWO are examples of 'Drift' in a GitOps environment?

Accepted Answer

A manual update to a Deployment image via kubectl.. Drift is any change to the cluster state that is not reflected in the Git repository.

Answer

A temporary spike in CPU usage.

Answer

A container crashing due to a code bug.

Answer

A new Git commit.

Question 5

Which TWO of the following are primary benefits of storing the entire desired state of a system in a versioned Git repository?

Accepted Answer

Comprehensive audit trail of all configuration changes. Version control provides a clear audit trail of who changed what, and enables easy restoration to a previous known-good state.

Answer

Automatic hardware repair

Answer

High-availability of the Git server

Answer

Automatic scaling of cluster nodes

Question 6

What is the relationship between the 'desired state' and the 'actual state' in GitOps?

Accepted Answer

The controller continuously reconciles the actual state to the desired state.. The goal of GitOps is to make the actual state equal to the desired state.

Answer

The desired state is defined by the actual state.

Answer

The desired state is enforced by the controller to match the actual state.

Answer

The actual state is manually pushed to the desired state.

Question 7

A senior cloud architect is designing a multi-tenant platform using GitOps. They want to ensure that continuous drift detection and correction operate reliably without causing system instability. Which TWO practices help mitigate risks associated with automated continuous drift correction?

Accepted Answer

Configuring the GitOps controller to ignore specific dynamic fields updated by in-cluster controllers, such as 'spec.replicas' managed by a HorizontalPodAutoscaler (HPA).. Automated drift correction can cause feedback loops or resource exhaustion if external mutations (like auto-scalers modifying replica counts or controllers adding status annotations) conflict with Git. Ignoring dynamic runtime fields or using structured sync windows mitigates these risks.

Answer

Granting full cluster-admin permissions to all application developers so they can manually disable drift correction during deployments.

Answer

Disabling Git versioning so that drift detection compares live state against an unversioned NFS network share.

Answer

Setting the reconciliation loop interval to run once every 30 seconds while forcing a full cluster node reboot on every iteration.

Question 8

Why does GitOps encourage the use of small, frequent commits?

Accepted Answer

To reduce the blast radius and simplify troubleshooting.. Small commits make it easier to identify the cause of failures, simplify rollbacks, and reduce the risk of large-scale outages.

Answer

To force developers to spend more time on documentation.

Answer

To ensure the Git server doesn't crash.

Answer

To minimize the size of the Git repository.

Question 9

Which TWO items are typically included in a GitOps repository?

Accepted Answer

Kustomize overlays or Helm charts.. A GitOps repository contains the declarative definitions of the infrastructure (Kubernetes manifests) and the configuration required to manage them.

Answer

User password lists.

Answer

Database backups.

Answer

Application source code.

Question 10

Which THREE features of Kubernetes are commonly used to support GitOps?

Accepted Answer

The Kubernetes API for resource management.. GitOps relies on the Kubernetes API, Namespaces for isolation, and RBAC to secure the controller's access.

Answer

Node labels for scheduling.

Answer

The cluster's internal clock synchronization.

Question 11

Which of the following is a primary benefit of using a GitOps pull-based model over a push-based CI/CD model?

Accepted Answer

Removal of the need for external access to cluster credentials.. Pull-based models increase security by eliminating the need to expose cluster credentials to external CI/CD pipelines.

Answer

Automatic code compilation within the cluster.

Answer

Support for imperative commands.

Answer

Faster deployment velocity.

Question 12

Which THREE of the following are common GitOps tools used in the CNCF ecosystem?

Accepted Answer

Crossplane.. Argo CD, Flux, and Crossplane are recognized GitOps-focused tools.

Answer

Apache HTTP Server.

Answer

MySQL.

Question 13

You are debugging a GitOps deployment. The controller shows 'OutOfSync' but the cluster seems to be running correctly. What is the most likely cause?

Accepted Answer

Manual changes were made to the live resource that weren't captured in Git.. An 'OutOfSync' status indicates that the actual cluster configuration deviates from the declarative state defined in Git.

Answer

The network latency to the Git server is too high.

Answer

The Git repository is empty.

Answer

The controller is broken.

Question 14

What is the primary advantage of storing Kubernetes manifests in a version-controlled repository?

Accepted Answer

It provides a backup in case the cluster is deleted.. Version control allows for tracking changes, reverting to previous states, and providing a historical audit log.

Answer

It makes the container images run faster.

Answer

It automatically patches security vulnerabilities.

Answer

It allows developers to bypass the CI/CD system.

Question 15

In GitOps, what is a 'Merge Request' (or Pull Request) used for?

Accepted Answer

To review, approve, and audit proposed changes to the desired state.. The PR/MR process acts as a gatekeeping mechanism for reviewing and approving changes before they are merged into the main branch and applied to the cluster.

Answer

To bypass security checks.

Answer

To perform unit tests on the code.

Answer

To delete the cluster.

Question 16

Which of these is a typical 'Desired State' artifact in GitOps?

Accepted Answer

A Kubernetes YAML manifest.. Kubernetes manifest files, Helm charts, or Kustomize templates are the standard ways to define declarative state.

Answer

An audit log from the cluster.

Answer

A shell script that installs software.

Answer

A live running container.

Question 17

What is the purpose of 'Image Tagging' in a GitOps workflow?

Accepted Answer

To ensure that the exact version of the application is deployed consistently.. Using specific image tags (e.g., SHA-based, not 'latest') ensures that the deployment remains deterministic and immutable.

Answer

To force the container to restart.

Answer

To track how many users are logged in.

Answer

To allow the container registry to delete old images.

Question 18

Which TWO are common strategies for GitOps repo structure?

Accepted Answer

Directory-per-environment.. Common strategies include 'App-of-Apps' for managing nested dependencies and 'Directory-per-Environment' for separating configurations.

Answer

Creating one repository per single microservice.

Answer

Never using branches.

Answer

Storing all files in a single flat directory.

Question 19

When defining a declarative desired state in Kubernetes, which attribute is essential to satisfy the 'declarative' principle?

Accepted Answer

A YAML manifest describing the final resource configuration.. The manifest should define the final state, not the steps taken to achieve it.

Answer

A shell script that executes 'kubectl apply'.

Answer

A webhook that triggers an update process.

Answer

A manual 'kubectl edit' command.

Question 20

Why is 'pull-based' reconciliation considered more secure than 'push-based' CI/CD?

Accepted Answer

Because the cluster initiates the connection.. Push-based systems require the CI/CD server to have cluster-admin credentials, whereas pull-based controllers use service accounts within the cluster.

Answer

Because it eliminates the need for Git.

Answer

Because Git requires passwords for every pull.

Answer

Because it removes the need for container images.